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Description 

'• BACKGROUND OF THE INVENTION 
(1) Field of the Invention . 

[0001 ] The present invention relates to a storage serv- 
ice In the digital broadcast or the like; whereby received 
scrambled content is stored and then descrambled as 
required. More speclticaliy, the present invention relates 
to technology for inriproving performance of the service 
in some particular reproduction modes. 

(2^ Description of the Related Art 

[0002] In the current pay satellite digital broadcast sys- 
tem, a viewer contracts witfi a broadcast provider to pay 
some amount of charges to the broadcast provider for 
viewing programs on selected channels. 
[0003] Since a broadcasting satellite broadcasts on a 
number of channels, programs on the channels for which 
a viewer does not make subscribing contracts are also 
broadcast to the viewer. The receiver owned by the view- 
er, then, confirms the presence/absence of the subscrib- 
ing contract for each channel and receives only programs 
on the channels allowed to be viewed. Such technology 
for selecting channels to receive programs thereon is 
called Conditional Access (abbreviated as "CA"). 
[0004] On the other hand, the transmitter scrambles 
content Including audio and visual data of a pay broad- 
cast program to be broadcast one each channel, where 
content per predetenmined unit is scrambled with a 
scrambling key different for each predetermined unit of 
contents. The transmitter, then, sequentially transmits 
the scrambled content accompanied with an Entitlement 
Control Message (ECM) containing this scrambling key 
and the scrambling key for content in the successive pre- 
detemiined unit. This ECM is encrypted so as to be in- 
terpreted only by the receivers owned by subscribers to 
the channel. 

[0005] Note that the scrambling key used for scram- 
bling data functions as a descrambling key as well for 
descrambling the data. 

[0006] Each receiver comes with an IC card used for 
the receiver only, to which an identifying number asso- 
ciated with the subscriber is assigned. The IC card has 
a CPU and a memory within it to store contract conditions 
and software for executing CA processes. The data re- 
lating to the CA processes is completely digitized and 
contained in the IC card, which makes unauthorized 
viewing difficult and therefore provides high levels of se- 
curity. 

[0007] Meanwhile, the service called a "storage sen/- 
ice" Is scheduled to become operational targeted for 
those who have not yet subscribed to a channel so that, 
once storing scrambled content with ECM In the record- 
ing media in the receivers owned by them, they pay some 
amount of charges for viewing the content to become 



subscribers, which enables them to decode the ECMs 
so as to reproduce the stored scrambled content. 
[0008] In such a service, when reproducing content in 
the normal reproduction mode, the receiver acquires con- 
tent in.the first predetermined unit, and decodes the ac- . 
companied ECM to extract the scrambling keys for con- 
tent in the first and the second units. Then, the receiver 
descnambies the content in the first unit using the scram- 
bling key exclusive to the content. As for the content in 
the second unit or later, the receiver sequentially de- 
scrambles content in each unit using the scrambling key 
obtained In the process for the preceding unit. 
[0009] However, when reproducing content by the 
storage service in the particular reproduction modes such 
as a fast-fonvard reproduction mode and a fast-reverse 
reproduction mode, the receiver cannot descramble con- 
tent in each unit using the scrambling key obtained in the 
process for the preceding unit, because the order of the 
reproduction becomes different from that in the nomial 
reproduction mode. Therefore, the receiver has to, each 
time acquiring content in a predetermined unit, decode 
the accompanied ECM to obtain a scrambling key and 
descramble the scrambled content using the key, which 
makes It difficult to realize a sufficient perfonnance level 
of the particular reproduction modes, such as fast-for- 
ward speed. 

[0010] For other relevant background information at- 
tention is directed to EP-A-0 903 886 A and US-A-6 1 4B 

082. 

SUMMARY OF THE INDENTION 

[001 1 ] The object of the invention is to provide a broad- 
cast apparatus for offering a storage service, a method 
and a computer program for the same, a reception ap- 
paratus for offering the storage service, and a method 
and a computer program for the same, ail of which im- 
prove perfomnance of particular reproduction processes 
in the storage service. 

[0012] The reception apparatus (hereafter called "re- 
ception apparatus A") for providing a storage sen/Ice ac- 
cording to the invention Is made up of: a reception unit 
for receiving the scrambled content, wherein the scram- 
bled content is scrambled so that a predetermined unit 
of scrambled content, which is a portion of the scrambled 
content, is descrambled using a descrambling key cor- 
responding to the predetermined unit of scrambled con- 
tent, and at least one piece of storage information in 
which a list including all descrambling keys to be used 
for descrambling the scrambled content is embedded; a 
storage unit for storing the received scrambled content 
and the storage Information; a list extraction unit for ex- 
tracting the list from the stored storage information; a 
descramble processing unit for (a) extracting the prede- 
ss termined unit of scrambled content from the stored 
scrambled content, (b) extracting a descrambling key 
corresponding to the predetemiined unit of scrambled 
content from the extracted list, and (c) descrambling the 
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extracted predetermined unit of scrambled content using 
the extracted descrambling key; and a reproduction unit 
for reproducing the predetennined untt of descrambled 
content In the descranribled order. 
[0013], With this construction, -the storage Information 
in which the list, of the descrambling keys is embedded 
and the scrambled content can be received and stored. 
As a result, when reproducing the stored scrambled con- 
tent, a descrambling key required for descrambling 
scrambled content in the predetermined unit can be ex- 
tracted from the list. 

[0014] Therefore, the extraction of the descrambling 
key can be executed in a short time and at low load, which 
improves the perfomriance of particular reproduction 
processes, such as fast forward speed, to a sufficient 
level. 

[0O1 5] In the above reception apparatus, the reception 
unit receives one piece of storage information in which 
the list is embedded, the storage unit stores the received 
scrambled content and the one piece of storage Informa- 
tion, and the list extraction unit extracts the list from the 
stored one piece of storage Information. 
[0O1 6] With this construction, the reception apparatus 
can receive and store a piece of storage Information In 
which the list of descrambling keys is embedded and 
extract the list from the stored one piece of storage In- 
formation. 

[0017] In the above reception apparatus, the reception 
unit receives a plurality of pieces of storage information 
in each piece of which a divided portion of the list Is em- 
bedded, the storage unit stores the received scrambled 
content and the plurality of pieces of storage Information, 
and the list extraction unit extracts the list from the stored 
plurality of pieces of storage information. 
[001 8] With this construction, the reception apparatus 
can receive and store the plurality of pieces of storage 
ECM, in each piece of which a divided portion of the list 
of descrambling keys is embedded, and extract the list 
from the stored plurality of pieces of storage information. 
[001 9] In the above reception apparatus, the reception 
unit sequentially receives a transport stream (TS) packet 
Including the predetermined unit of scrambled content, 
the storage u nit sequentially stores the received TS pack- 
et, wherein the descramble processing unit includes: a 
scrambled content extraction unit for extracting the pre- 
detemilned unit of scrambled content from one of the TS 
packets stored in the storage unit, and counting the or- 
dinal position of the TS packet from the leading TS pack- 
et; a descrambling key extraction unit for extracting a 
descrambling key from the list, based on the counted 
ordinal position; and a descrambling unit for descram- 
bling the extracted predetermined unit of scrambled con- 
tent using the extracted descrambling key. 
[0020] With this construction, the reception apparatus 
counts the number of TS packets from the leading TS 
packet, and can easily extract a descrambilng key from 
the list, based on the counted number of TS packets. 
[0021 ] In the above reception apparatus A, the recep- 



tion unit receives at least one storage Entitlement Control 
Messaige (ECM) as the at least one piece of storage In- 
fonnatlon, the list being embedded in a portion to be en- 
coded in the main body of the ECiyi, the storage unit 

5 stores the received storage ECMs. and the list extraction 
unit interprets the stored storage ECMs to extract the list 
(hereafter called "reception apparatus B"). 
[0022] With this construction, the reception apparatus 
can receive and store the storage ECM, where the list is 

10 embedded In a portion to be encoded In a main body of 
the ECM , and interpret the stored storage ECM to extract 
the list. Therefore, the invention can be realized accord- 
ing to the current standard. 

[0023] In the above reception apparatus B, the recep- 
15 tion unit receives the storage ECMs Including identifying 
inf omiatlon for distinguishing the storage ECMs from an- 
other type of ECM. 

[0024] With this construction, the storage ECMs can 
be easily distinguished from another type of ECM, be- 

20 cause the storage ECMs include identifying inf omriation. 
[0025] In the above reception apparatus B, the recep- 
tion unit receives the storage ECMs at a time. 
[0026] With this construction, the storage ECMs can 
be transmitted at a time. As a result, a load necessary to 

25 control the transmission timing by the broadcast appa- 
ratus can be reduced. 

[0027] In the above reception apparatus A, the recep- 
tion unit sequentially receives a TS packet including (a) 
the predetennined unit of scrambled content and (b) 

30 packet specifying infonnation for specifying an unscram- 
bled TS packet, and the storage unit sequentially stores 
the received TS packet, wherein the descramble 
processing unit includes: a scrambled content extraction 
unit for extracting the predetermined unit of scrambled 

35 content and the packet specifying information from one 
of the TS packets stored In the storage unit; a descram- 
bling key extraction unit for extracting a descrambling 
key from the list, based on the extracted packetspecifying 
information; and a descrambling unit for descrambling 

40 the extracted predetermined unit of scrambled content 
using the extracted descrambling key. 
[0028] With this construction, the descrambling key 
can be easily extracted from the list, based on the packet 
specifying information. 

45 [0029] In the above reception apparatus, the packet 
specifying Infonnation is one of Continuity Counter (CC), 
the number of TS packets, a cumulative amount of data, 
a relative reproduction time, and a scrambling key iden- 
tifier, the scrambled content extraction unit extracts, as 

50 the packetspecifying information, one of the Continuity 
Counter (CC), the number of TS packets, the cumulative 
amount of data, the relative reproduction time, and the 
scrambling key identifier, and the descrambling key ex- 
traction unit perfonns a predetermined operation to the 

55 extracted information as the packet identifying infonna- 
tion to generate a descrambling key identifier, and ex- 
tracts a descramblmg key from the list based on the de- 
scrambling key identifier 
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[0030] vyith this construction, the descrambling key 
identifier is generated by performing the predetermined 
operation to one of the CC, the number of TS packets, 
the^cumuiative amount of data, the reiatiye reproduction 
time, andthe scrambling keyldentlfter. As conrtpared vyith 
the case vyhere the value of one of the above-stated in- 
formation issetatthe value of the descrambling key Iden- 
tifier, the value of the descrambling key Identifier be- 
comes difficult to be analyzed by malicious users, which 
improves the security, in addition, the above-stated in- 
formation used in the current standard also can be used, 
and other information which would lead to increase In the 
amount of transmitted data does not need to be attached 
to extract the descrambling key. 
[0031 ] In the above reception apparatus A, the recep- 
tion unit sequentially receives a TS packet including (a) 
the predetermined unit of scrambled content and (b) un- 
scrambled I picture infomnation, wherein the I picture in- 
formation indicates whether the TS packet correspond- 
ing to the information consists of a portion of an I pic- 
ture/an t picture or not, and the storage unit sequentially 
stores the received TS packet, wherein the descramble 
processing unit includes: a scrambled content extraction 
unit for. when performing particular reproduction proc- 
esses, extracting the predetermined unit of scrambled 
content and 1 picture information from one of the TS pack- 
ets stored In the storage unit; an I picture judgement unit 
for judging whether the extracted predetennined unit of 
scrambled content consists of a portion of an I picture/an 
I picture or not, based on the extracted I picture infomna- 
tlon; a descrambling key extraction unit for extracting a 
descrambling key from the list, only when the extracted 
predetennined unit of scrambled content consists of a 
portion of an I picture/an I picture; and a descrambling 
unit for descrambling the extracted predetennined unit 
of scrambled content using the extracted descrambling 
key. 

[0032] With this construction, the reception apparatus 
can reproduce i pictures only. As a result, particular re- 
production processes such as fast fon/vard reproduction 
can be easily conducted. 

[0033] The above reception apparatus A further man- 
aging contract information and consisting of a security 
module whose portion does not effectively function if a 
contract has not been made, and other modules, the re- 
ception apparatus is further made up of: a list holding 
unltfor holding the list extracted by the list extraction unit, 
wherein the list extraction unit and the list holding unit 
are provided within the security module. 
[0034] With this construction, the list can be stored 
within the security module, which prevents the list from 
being analyzed by malicious users, and therefore im- 
proves the security. 

[0035] Another reception apparatus (hereafter called 
"reception apparatus C") for providing a storage service 
according to the invention is made up of: a reception unit 
for receiving the scrambled content, wherein the scram- 
bled content is scrambled so that a predetermined unit 



of scrambled content, which is a portion of the scrambled 
content, is descrambled using a descrambling key cor- 
responding to the predetermined unit of scrambled con- 
tent, and a descrambling key is attached to eaoh prede- 

5 tenrnined unit of scrambled content; a:^ storage unit for 
storing the received scrambled content; a llst gieneratioh 
unit for, when/after storing the received scrambled con- 
tent by the storage unit, generating a list including all 
descrambling keys to be used for descrambling' the 

fo scrambled content, based on the descrambling key at- 
tached to each predetermined unit of scrambled content; 
a descramble processing unit for (a) extracting the pre- 
determined unit of scrambled content from the stored 
scrambled content, (b) extracting a descrambling key 

15 corresponding to the extracted predetermined unit of 
scrambled content from the generated list, and (c) de- 
scrambling the extracted predetennined unit of scram- 
bled content using the extracted descrambling key; and 
a reproduction unit for reproducing the predetermined 

20 unit of descrambled content in the descrambled order. 
[0036] With this construction, the reception apparatus 
can receive end store the scrambled content, white gen- 
erating and holding the list of the descrambling keys. As 
a result, when reproducing the stored scrambled content, 

25 a descrambling key required for descrambling the pre- 
determined unit of scrambled content can be extracted 
from the list. 

[00371 Therefore, the extraction of the descrambling 
key can be executed in a shorttime and at lew load, which 
30 improves the performance of particular reproduction 
processes, such as fast forward speed, to a sufficient 
level. 

[0038] In the above reception apparatus C, the recep- 
tion unit sequentially receives a TS packet including (a) 

3S the predetennined unit of scrambled content, and (b) aux- 
iliary information including a descrambling key and infor- 
mation for associating the descrambling key with scram- 
bled content, the storage unit sequentially stores the re- 
ceived TS packet, and the list generation unit generates 

40 the list, based on the auxiliary infonnation. 

[0039] With this construction, the list can be easily gen- 
erated based on the auxiliary infonnation. 
[0040] In the above reception apparatus, theTS packet 
includes an ECM, the auxiliary Information being embed- 

45 ded in a portion to be encoded in a main body of the 
ECM. and the list generation unit extracts the auxiliary 
information embedded in the ECM, and generates the 
list based on the auxiliary information. 
[0041] With this construction, the reception apparatus 

50 can receive and store the ECM, where the auxiliary in- 
fonnation Is embedded In the portion to be encoded in 
the main body of the ECM, and can Interpret the stored 
ECM to generate the list. As a result, the present inven- 
tion can be realized according to the current standard. 

55 [0042] A broadcast apparatus (hereafter called 
"broadcast apparatus A") for providing a storage service 
according to the invention Is made up of: an acquisition 
unit for acquiring content to be scrambled and a plurality 
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of descrambling keys; a scramble processing unit for 
scrambling a predetermined unit of content out of the 
acquired cd^ntentsothatthe predetermined unit of scram- 
bled content is descrambled using a descrambling key 
different for each predetemiined unit or each set of a 
plurality of predetermined units;- an attaching unit for at- 
taching auxiliary Information to the predetermined unit of 
scrambled content, the auxiliary information consisting 
of (a) infonnation for identifying the scrambled content 
and (b) a descrambling key corresponding to the content, 
and used for having the reception apparatus generate a 
list of the descrambling keys; and a broadcast unit for 
broadcasting the scrambled content to which the auxiliary 
information Is added. 

[0043] With this construction . the auxiliary information 
used for having the reception apparatus generate the list 
of the descrambling keys can be attached to the scram- 
bled content. As a result, the reception apparatus can 
easily generate the list of the descrambling keys. 
[0044] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed in a short 
time and at low load, which improves the performance 
of particular reproduction processes, such as fastforward 
speed, to a sufficient level. 

[0045] In the above broadcast apparatus A, the attach- 
ing unit embeds the auxiliary Information in a portion to 
be encoded in a main body of an ECM and attaches the 
ECM to the predeteimined unit of scrambled content. 
[0046] With this construction, the broadcast apparatus 
can attach the ECM to the scrambled content, where the 
auxiliary information is embedded in the portion to be 
encoded In the main body of the ECM. As a result, the 
present Invention can be realized according to the current 
standard. 

[0047] Another broadcast apparatus (hereafter called 
"broadcast apparatus B") for providing a storage service, 
according to the invention. Is made up of: an acquisition 
unit for acquiring content to be scrambled and a plurality 
of descrambling keys; a list generation unit for generating 
a list of the descrambling keys; an embedding unit for 
embedding the list in at least one piece of predetemiined 
information to generate at least one piece of storage in- 
fonnation; a scramble processing unit for scrambling a 
predetermined unit of content out of the acquired content 
so that the predetermined unit of scrambled content is 
descrambled using a descrambling key different for each 
predetermined unit or each set of a plurality of predeter- 
mined units; and a broadcast unit for broadcasting the 
generated storage information and the scrambled con- 
tent. 

[0048] With this construction, the broadcast apparatus 
can broadcast the storage information in which the list of 
the descrambling keys Is embedded, together with the 

scrambled content. 

[0049] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed in a short 
time and at low load, which improves the performance 
of particular reproduction processes, such as fastforward 



speed, to. a sufficient level, 

[0050] In the above broadcast apparatus B, the enri- . 
bedding unit embeds the list in one piece of predeter- 
mined- infonnation to generate one piece of storage In- 
. 5 fomnation, and the broadcasting unit broadcasts the gen- 
erated one piece of information and the scrarnlDled con- 
tent. 

[0051 ] With this construction, the broadcast apparatus 
can generate and broadcast a piece of storage informa- 
10 tion in which the list of all descrambling keys is embed- 
ded. 

[0052] In the above broadcast apparatus B, the em- 
bedding unit embeds a divided portion of the list in each 
of a plurality of pieces of predetermined Information to 
IB gene rate a plu rallty of pieces of storage information , and 
the broadcasting unit broadcasts the generated plurality 
of pieces of storage information and the scrambled con- 
tent. 

[0053] With this constmction, the broadcast apparatus 
20 can generate and broadcast a plurality of pieces of stor- 
age infom^ation In each piece of which a divided portion 
of the list of descrambling keys Is embedded. 
[0054] In the above broadcast apparatus B, the em- 
bedding unit embeds the list in a portion to be encoded 
25 in a main body of at least one ECM to generate at. least 
one piece of storage infonnation. 

[0055] With this constmction, the broadcast apparatus 
can attach the ECM to the scrambled content, where the 
list is embedded In the portion to be encoded in the main 

30 body of the ECM. As a result, the present Invention can 
be realized according to the current standard. 
[0056] I n the above broadcast apparatus B, the broad- 
cast unit broadcasts one set of the storage information 
while all the scrambled content corresponding to the stor- 

35 age information are broadcast once. 

[0057] This construction can save the amount of data 
transmitted. 

[0058] A program used for a reception apparatus for 
providing a storage service according to the invention 

40 has the reception apparatus conduct the following steps 
of: a reception step for receiving the scrambled content, 
wherein the scrambled content is scrambled so that a 
predetermined unit of scrambled content, which is a por- 
tion of the scrambled content, is descrambled using a 

45 descrambling key corresponding to the predetermined 
unit of scrambled content, and at least one piece of stor- 
age infonnation In which a list including all descrambling 
keys to be used for descrambling the scrambled content 
is embedded; a storage step for storing the received 

50 scrambled content and the storage information; a list ex- 
traction step for extracting the listf rom the stored storage 
infonnation; a descramble processing step for (a) extract- 
ing the predetermined unit of scrambled content from the 
stored scrambled content, (b) extracting a descrambling 

55 key corresponding to the predetermined unit of scram- 
bled content from the extracted list, and (c) descrambling 
the extracted predetemnlned unit of scrambled content 
using the extracted descrambling key; and a reproduction 
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step for reproducing the predetermined unit of descram- 
bled content in the descrambled order. 
[0059] With this construction, the stbrage information 
in which the list Qf the descrambling Iceys is embedded 
and the scrambled content can be received and stored. 
As a result; when reproducing the stored scrambled con- 
tent, a descrambling key required for descrambling 
scrambled content in the predetemriined unit can be ex- 
tracted from the list. . 

[0060] Therefore, the extraction of the descrambling 
key can be executed In a short time and at low load, which 
improves the performance of particular reproduction 
processes, such as fast fonvard speed, to a sufficient 
level. 

[0061 ] Another program according to the invention has 
a reception apparatus for providing a storage service 
conduct the following steps of: a reception step for re- 
ceiving the scrambled content, wherein the scrambled 
content is scrambled so that a predetennined unit of 
scrambled content, which Is a portion of the scrambled 
content, is descrambled using a descrambling key cor- 
responding to the predetemnined unit of scrambled con- 
tent, and a descrambling key Is attached to each prede- 
termined unit of scrambled content; a storage step for 
storing the received scrambled content; a list generation 
step for, when/after storing the received scrambled con- 
tent in the storage step, generating a list including ail 
descrambling keys to be used for descrambling the 
scrambled content, based on the descrambling key at- 
tached to each predetemiined unit of scrambled content; 
a descramble processing step for (a) extracting the pre- 
determined unit of scrambled content from the stored 
scrambled content, (b) extracting a descrambling key 
corresponding to the extracted predetermined unit of 
scrambled content from the generated list, and (c) de- 
scrambling the extracted predetermined unit of scram- 
bled content using the extracted descrambling key; and 
a reproduction step for reproducing the predetemiined 
unit of descrambled content in the descrambled order. 
[0062] With this construction, the reception apparatus 
can receive and store the scrambled content, while gen- 
erating and holding the list of the descrambling keys. As 
a result, when reproducing the stored scrambled content, 
a descrambling key required for descrambling the pre- 
detennined unit of scrambled content can be extracted 
from the list. 

[00631 Therefore, the extraction of the descrambling 
key can be executed in a shorttime and at low toad, which 

improves the performance of particular reproduction 
processes, such as fast fonward speed, to a sufficient 
level. 

[0064] A program used for a broadcast apparatus for 
providing a storage service according to the. invention 
has the broadcast apparatus conduct the following steps 
of: an acquisition step for acquiring content to be scram- 
bled and a plurality of descrambling keys; a scramble 
processing step for scrambling a predetemnined unit of 
content out of the acquired content so that the predeter- 



mined unit of scrambled content is descrambled using a 
descrambling key different for each predetermined unit 
or each set of a plurality of predetemiined urilts; an at- 
taching stisp for attaching auxiliary information to the pre- 

s detennlni&d unit of scrambled content, the auxiliary Infer- 
. mation consisting of (a) information for identifying the 
scrambled content and (b) a descrambling key corre- 
sponding to the content, and used for having the recep- 
tion apparatus generate a list of the descrambling keys; 
and a broadcast step for broadcasting the scrambled 
content to which the auxiliary Infomnation is added. 
[0065] With this construction, the auxiliary infomnation 
used for having the reception apparatus generate the list 
of the descrambling keys can be attached to the scram- 

15 bled content. As a result, the reception apparatus can 
easily generate the list of the descrambling keys. 
[0066] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed in ashort 
time and at low load, which improves the performance 

^ of particular reproduction processes, such as fastfonvard 
speed, to a sufficient level. 

[0067] Another program according to the invention has 
a broadcast apparatus for providing a storage sen/ice 
conduct the following steps of: an acquisition step for 

25 acquiring content to be scrambled .and a plurality of de- 
scrambling keys; a list generation step for generating a 
list of the descrambling keys; an embedding step for em- 
bedding the list in at least one piece of predetermined 
infomnation to generate at least one piece of storage in- 

30 fomnatlon; a scramble processing step for scrambling a 
predetemnined unit of content out of the acquired content 
so that the predetermined unit of scrambled content is 
descrambled using a descrambling key different for each 
predetennined unit or each set of a plurality of predeter- 

35 mined units; and a broadcast step for broadcasting the 
generated storage information and the scrambled con- 
tent. 

[0068] With this construction, the broadcast apparatus 
can broadcast the storage infomnation in which the list of 
the descrambling keys is embedded, together with the 
scrambled content. 

[0069] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed in ashort 
time and at low load, which improves the performance 
of particular reproduction p rocesses, such as fastfonvard 
speed, to a sufficient level. 

[0C7G] A recording medium, according to the invention, 
on which a program used for a reception apparatus for 
providing a storage sen/ice Is recorded, the program has 

50 the reception apparatus conduct the following steps of: 
a reception step for receiving the scrambled content, 
wherein the scrambled content is scrambled so that a 
predetennined unit of scrambled content, which Is a por- 
tion of the scrambled content, Is descrambled using a 

S5 descrambling key corresponding to the predetermined 
unit of scrambled content, and at least one piece of stor- 
age information In which a list including all descrambling 
keys to be used for descrambling the scrambled content 
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is embedded; a storage step for storing the received 
scrambled content and the storage intonnation: a list ex- 
traction step for extracting the list fronn the stored storage 
information; a descramble processing step tor (a) extract- 
ing tfie predetermined unit of scrambled content from the ,s 
stored scrambled content, (b) extracting a descrambling . 
l<ey corresponding to the predetermined unit of scram- 
bled content from the extracted list, and (c) descrambling 
the extracted predetermined unit of scrambled content 
using the extracted descrambling key; and a reproduction fo 
step for reproducing the predetermined unit of descram- 
bled content in the descrambled order. 
[0071] With this construction, the storage information 
in which the list of the descrambling keys is embedded 
and the scrambled content can be received and stored. 
As a result, when reproducing the stored scrambled con- 
tent, a descrambling key required for descrambling 
scrambled content In the predetermined unit can be ex- 
tracted from the list. 

[0072] Therefore, the extraction of the descrambling 20 
key can be executed in a short time and at low load, which 
improves the perfomnance of particular reproduction 
processes, such as fast fonvard speed, to a sufficient 
level. 

[0073] Another recording medium, according to the in- 25 
vention, on which a program used for a reception appa- 
ratus for providing a storage service is recorded, the pro- 
gram has the reception apparatus conduct the following 
steps of: a raception step for receiving the scrambled 
content, wherein the scrambled content is scrambled so so 
that a predetennined unit of scrambled content, which is 
a portion of the scrambled content, is descrambled using 
a descrambling key corresponding to the predetemnlned 
unit of scrambled content, and a descrambling key is at- 
tached to each predetennined unit of scrambled content; 35 
a storage step for storing the received scrambled content; 
a list generation step for, when/after storing the received 
scrambled content in the storage step, generating a list 
including all descrambling keys to be used for descram- 
bling the scrambled content, based on the descrambling 
key attached to each predetenmlned unit of scrambled 
content; a descramble processing step for (a) extracting 
the predetermined unit of scrambled content from the 
stored scrambled content, (b) extracting a descrambling 
key corresponding to the extracted predetemnlned unit 45 
of scrambled content from the generated list, and (c) de- 
scrambling the extracted predetermined unit of scram- 
bled content using the extracted descrambling key; and 
a reproduction step for reproducing the predetermined 
unit of descrambled content in the descrambled order. so 
[0074] With this construction, the reception apparatus 
can receive and store the scrambled content, while gen- 
erating and holding the list of the descrambling keys. As 
a result, when reproducing the stored scrambled content, 
a descrambling key required for descrambling the pre- ss 
detemnined unit of scrambled content can be extracted 
from the list. 

[0075] Therefore, the extraction of the descrambling 



key can be executed in a shorttime and at lowload, which 
improves the performance of particular reproduction 
processes, such as fast fonvard speed, to a. sufficient 
■leveK 

[0076] A recording medium, according to the invention, 
on which a program used for a broadcast apparatus for 
providing a storage service is recorded, the program.has 
the broadcast apparatus conduct the follQWing steps of: 
an acquisition step for acquiring content to be scrarnbled 
and a plurality of descrambling keys; a scramble process- 
ing step for scrambling a predetenmlned unit of content 
out of the acquired content so that the predetermined 
unit of scrambled content is descrambled using a de- 
scrambling key different for each predetermined unit or 
each set of a plurality of predetermined units; an attaching 
step for attaching auxiliary Infonnation to the predeter- 
mined unit of scrambled content, the auxiliary infonnation 
consisting of (a) infonnation for identifying the scrambled 
content and (b) a descrambling key corresponding to the 
content, and used for having the reception apparatus 
generate a list of the descrambling keys; and a broadcast 
step for broadcasting the scrambled content to which the 
auxiliary information is added. 

[0077] With this construction, the auxiliary infonnation 
used for having the reception apparatus generate the list 
of the descrambling keys can be attached to the scram- 
bled content As a result, the reception apparatus can 
easily generate the list of the descrambling keys. 
[0078] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed In a short 
time and at low load, which Improves the performance 
of particular reproduction processes, such asfastforward 
speed, to a sufficient level. 

[0079] Another recording medium, according to the In- 
vention, on which a program used for a broadcast appa- 
ratus for providing a storage service is recorded, the pro- 
gram has the broadcast apparatus conduct the following 
steps of: an acquisition step for acquiring content to be 
scrambled and a plurality of descrambling keys; a list 
generation step for generating a list of the descrambling 
keys; an embedding step for embedding the list in at least 
one piece of predetermined information to generate at 
least one piece of storage information; a scramble 
processing step for scrambling a predetermined unit of 
content out of the acquired content so that the predeter- 
mined unit of scrambled content Is descrambled using a 
descrambling key different for each predetemnlned unit 
or each set of a plurality of predetennined units; and a 
broadcast step for broadcasting the generated storage 
infonnation and the scrambled content. 
[0080] With this construction, the broadcast apparatus 
can broadcast the storage information in which the list of 
the descrambling keys is embedded, together with the 
scrambled content. 

[0081] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed In a short 
time and at low load, which improves the perfomnance 
of particular reproduction processes, such asfastforward 
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speed, to a sufficient level. 

[0082] A recording medium according, to the. invention 
on which content to be broadcast to a reception appara- 
tus is recorded, the content are made up of: scrambled 
content which is scrambled so that a. predetermined unit 
of scrambled content, which is a portion of the scrambled 
content, is descrambled using a deecrambling l<ey cor- 
responding to the predetermined unit of content, and a 
storage ECM» wherein a itst Including all descrambling 
keys used tor descrambling the scrambled content is em- 
bedded In a portion to be encoded in a main body of at 
least one ECM. 

[0083] With this construction, the broadcast apparatus 
can broadcast the ECM, where the list including all de- 
scrambling l<eys is embedded in the portion to be encod- 
.ed in the main body of the ECM. As a result; the extraction 
of the descrambling key by the reception apparatus re- 
ceiving the content can be executed in a short time and 
at low load, which improves the performance of particular 
reproduction processes, such as fast forward speed, to 
a sufficient level. 

[0084] A method for receiving a storage service ac- 
cording to the invention includes the steps of: a reception 
step for receiving the scrambled content, wherein the 
scrambled content is scrambled so that a predetemiined 
unit of scrambled content, which is a portion of the scram- 
ble d content, Is descrambled using a descrambling key 
corresponding to the predetermined unit of scrambled 
content, and at least one piece of storage information in 
which a list Including all descrambling keys to be used 
for descrambling the scrambled content is embedded; a 
storage step for storing the received scrambled content 
and the storage Infomnatlon; a list extraction step for ex- 
tracting the list from the stored storage infomnatlon; a 
descrambie processing step for (a) extracting the prede- 
termined unit of scrambled content from the stored 
scrambled content, (b) extracting a descrambling key 
corresponding to the predetenmined unit of scrambled 
content from the extracted list, and (c) descrambling the 
extracted predetemnined unit of scrambled content using 
the extracted descrambling key; and a reproduction step 
for reproducing the predetermined unit of descrambled 
content in the descrambled order. 
[0085] With this construction, the storage information 
in which the list of the descrambling keys is embedded 
and the scrambled content can be received and stored. 
As a result, when reproducing the stored sc^mbisd con- 
tent, a descrambling key required for descrambling 
scrambled content in the predetermined unit can be ex- 
tracted from the list 

[0086] Therefore, the extraction of the descrambling 
l<ey can be executed In a short time and at low load, which 
improves the perfonmance of particular reproduction 
processes, such as fast fonward speed, to a sufficient 
level. 

[0087] Another method for receiving a storage service 
according to the invention includes the steps of: a recep- 
tion step for receiving the scrambled content, wherein 



the scrambled content is scrambled so that a predeter- 
miried unit of scrambled content, which is a portion of the 
scrarhbled content, is descrambled using a descrambling 
key corresponding to the predetermined unit of scram- 

5 . . bledicontent, and a descrambling key is attached to each 
predetemiined unit of scrambled content; a storage step 
for storing the received scrambled content; a list gener- 
ation step for, when/after storing the received scrambled 
content in the storage step, generating a list including all 

to descrambling keys to be used for descrambling the 
scrambled content, based on the descrambling key at- 
tached to each predetermined unit of scrambled content; 
a descrambie processing step for (a) extracting the pre- 
determined unit of scrambled content from the stored 

ts scrambled content, (b) extracting a descrambling key 
corresponding to the extracted predetennined unit of 
scrambled content from the generated list, and (c) de- 
scrambling the extracted predetermined unit of scram- 
bled content using the extracted descrambling key; and 

20 3 reproduction step for reproducing the predetermined 
unit of descrambled content in the descrambled order. 
[0088] With this construction, the reception apparatus 
can receive and store the scrambled content, while gen- 
erating and holding the list of the descrambling keys. As 

25 a result, when reproducing the stored scrambled content, 
a descrambling Icey required for descrambling the pre- 
determined unit of scrambled content can be extracted 
from the list. 

[0089] Therefore, the extraction of the descrambling 
30 key can be executed in a short time and at low load, which 
improves the performance of particular reproduction 
processes, such as fast forward speed, to a sufficient 
level. 

[0090] A method for broadcasting a storage sen/ice 

35 according to the invention includes the steps of: an ac- 
quisition step for acquiring content to be scrambled and 
a plurality of descrambling keys; a scramble processing 
step for scrambling a predetermined unit of content out 
of the acquired content so that the predetemntned unit of 

40 scrambled content is descrambled using a descrambling 
key different for each predetermined unit or each set of 
a plurality of predetermined units; an attaching step for 
attaching auxiliary Infonnation to the predetemiined unit 
of scrambled content, the auxiliary information consisting 

45 of (a) information for identifying the scrambled content 
and (b) a descrambling key corresponding to the content, 
and uSGufor having the reception apparatus generate a 
list of the descrambling keys; and a broadcast step for 
broadcasting the scrambled content to which the auxiliary 

so infomnatlon is added. 

[0091] With this construction, the auxiliary infomnatlon 
used for having the reception apparatus generate the list 
of the descrambling keys can be attached to the scram- 
bled content. As a result, the reception apparatus can 

55 easily generate the list of the descrambling keys. 

[0092] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed in a short 
time and at low toad, which Improves the perfomnance 



8 



15 



EP 1 215 905 B1 



16 



of particular reproduction processes, such asfasttorward 
speed, to a sufficient level. 

[0093] Another -method for broadcasting a storage 
service accorellng to the Invention Includes tlie steps of: 
an acquisition step for acquiring content to be scrambled 5 
and a plurality of descrambling keys;.a list generation 
step for generating a list of the- descrambling keys; an 
embedding step for embedding the list in at least one 
piece of predate nnined information to generate at least 
one piece of storage information; a scramble processing io 
step for scrambling a predetennined unit of content out 
of the acquired content so that the predetermined unit of 
scrambled content is descrambled using a descrambling 
key different for each predetemrjined unit or each set of 
a plurality of predetemiined units; and a broadcast step ^5 
for broadcasting the generated storage information and 
the scrambled content. With this construction, the broad- 
cast apparatus can broadcast the storage infonnation in 
which the list of the descrambling keys is embedded, 
together with the scrambled content. 
[0094] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed in a short 
time and at low load, which improves the performance 
of particular reproduction processes, such asfastfonward 
speed, to a sufficient level. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0095] These and the other objects, advantages and 
features of the invention will become apparent from the 3o 

following description thereof taken in conjunction with the 
accompanying drawings which illustrate a specific em- 
bodiment of the invention. 
[0096] In the drawings: 

FIG. 1 is the construction of a system for providing 
a storage service according to the first embodiment 

of the invention; 

FIG. 2 shows one example of the data structure of 
a scrambling key list descriptor; 
FIG. 3 shows one example of the data stmcture of 
an ECM for storage; 

FIG. 4 shows timing for transmitting the scrambling 
key list; 

FIG . 5 shows the detailed construction of the scram- 
bling process unit 103; . 

FIG. 6 shows a relation between content and scram- 
bling keys in a transport stream (TS); 
FIG. 7 shows the scrambling key list associated with 
the TS shown in FIG. 6; 

FIG. e shows the detailed construction of the de- 
scrambling process unit 204; 
FIG. 9 shows a procedure in the broadcasting proc- 
ess by means of the broadcast apparatus 100 ac- 
cording to the first embodiment of the invention; ^5 
FIG. 10 shows a procedure in the scrambling proc- 
ess by means of the scrambling process unit 103 in 
detail. 



FIG. 1 1 shows a procedure in the reception and stor- 
age processes by means of the reception apparatus 
200 and the security module 300 according to the 
first embodiment of the Invention; . 
FIG. 12 shows a procedure In the reproduction proc- 
ess after. the reception and storage processes by 
means of the reception apparatus 200 and the se- 
curity module 300 according to the first embodiment 
of the invention; 

FIG. 1 3 shows aprocedure in the descrambling proc- 
ess by means of the descrambling process unit 204 
In detail; 

FIG. 14 is a schematic view showing an image 
stream In the MPEG-2 coding system; 
FIG. 1 5 shows a TS obtained by converting the im- 
age stream shown in FIG. 14; 
Fl G . 1 6 shows a procedure in th e descrambling proc- 
ess in the fast-forward reproduction mode in detail; 
FIG. 17 shows a portion of the construction of a sys- 
tem for providing a storage service according to the 
second embodiment of the Invention; 
FIG. 1B shows the detailed constmction of the de- 
scrambling process unit 401; 
FIG. 1 9 shows a portion of the construction of a sys- 
tem for providing a storage service according to the 
third embodiment of the invention; 
FIG. 20 shows the detailed constmction of the 
scrambling process unit 601; 
FIG. 21 shows the scrambling key list in the case the 
value of "CC mod 16" is set at the scrambling key 
identifier; 

FIG. 22 shows the detailed constmction of the de- 
scrambling process unit 701; 
FIG. 23 shows a procedure in the broadcasting proc- 
ess by means of the broadcast apparatus 600 ac- 
cording to the third embodiment of the invention; 
FIG. 24 shows a procedure in the scrambling proc- 
ess by means of the scrambling process unit 601 in 
detail; 

FIG. 25 Shows a procedure in the reproduction proc- 
ess after the reception and storage processes by 
means of the reception apparatus 700 and the se- 
curity module 300 accenting to the third embodiment 
of the invention; 

FIG. 26 shows a procedure in the descrambling proc- 
ess by means of the descrambling process unit 701 
in detail; 

FIG. 27 shows the constmction of a system for pro- 
viding a storage service according to the fourth em- 
bodiment of the invention; 

FIG. 28 shows one example of the data structure of 
the scrambling key list generation descriptor; 
FIG. 29 shows one example of the data structure of 
an ECM tornormal reproduction, to which the scram- 
bling key list generation descriptor is added; 
FIG. 30 shows the detailed constmction of the 
scrambling process unit 802; 
FIG. 31 shows the detailed constmction of the de- 
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scrambling process unit 905; 
FIG. 32 shows a procedure in the broadcasting proc- 
ess by means of the broadcast apparatus BOO. ac- 
cording to the fourth ernbodirtierit pf the invention; 
FIG. 33 show&a procedure in the scrambling proc- 
ess by means of the scrambling.process unit 802 In 
detail; 

FIG. 34 shows a procedure in the reception and stor- 
age processes by means of the reception apparatus 
900 and the security module 1000 according to the 
fourth embodiment of the Invention; 
FIG. 35 shows a procedure in the reproduction proc- 
ess after the reception and storage processes by 
means of the reception apparatus 900 and the se- 
curity module 1 000 according to the fourth embodi- 
ment of the invention; 

FIG. 36 shows a procedure in the descrambling proc- 
ess by means of the descrambling process unit 905 
in detail; 

FIG. 37 shows the construction of a system for pro- 
viding a storage service according to the fifth em- 
bodiment of the invention; 

FIG. 38 is a schematic diagram showing changes In 
the scrambiing keys and timing for. updating ECMs 
for nomnal reproduction; 

FIG. 39 is a schematic diagram showing changes 
between an even number key and an odd number 
Icey, and timing for updating ECMs for normal repro- 
duction; 

FIG. 40 shows a transition of the scrambiing Icey list 
generated; 

FIG. 41 shows the detailed construction of the de- 
scrambling process unit 1207; 
FIG. 42 shows a procedure In the broadcasting proc- 
ess by means of the broadcast apparatus 1 1 00 ac- 
cording to the fifth embodiment of the invention; 
FIG. 43 shows a procedure In the reception and stor- 
age processes by means of the reception apparatus 
1 200 and the security module 1 300 according to the 
fourth embodiment of the invention; 
FIG. 44 shows a procedure in the reproduction proc- 
ess after the reception and storage processes by 
means of the reception apparatus 1200 and the se- 
curity module 1300 according to the fifth embodiment 
of the invention; 

FIG. 45 shows a procedure in the descrambling proc- 
ess by means of the descrambling process unit 1 207 
in detail; and 

FIG. 46 shows one example of the data structure of 
an 1 picture list descriptor. 

DESCRIPTION OF THE PREFERRED EMBODIMENT 

First Embodiment 

<Summary> 

[0097] A system for providing a storage service ac- 



cording to the first embodiment of the invention consists 
of a broadcast apparatus, a reception apparatus, and a 
security module. . 

.[0098] The broadcast apparatus generates a scram- 
.bling key list including all of the scrambiing keys neces- 
sary for descrambling scrambled content, includes the 
list in an ECM tor storage (hereafter cailled "storage 
ECM"), and broadcasts the scrambled content accom- 
panied with the ECM. 

[0099] The security module, which is integrated with 
the reception apparatus in a predetermined position, re- 
ceives and stores the storage ECM and the scrambled 
content, decodes the ECM for storage In return for the 
paid charges, and sequentially descramblesthe received 
scrambled content using the scrambiing key list included 
in the storage ECM. 

<Overall Constructlon> 

[01 00] FIG. 1 shows the construction of the system for 
providing a storage sen/ice according to the first embod- 
iment of the invention. The system shown in FIG. 1 con- 
sists of a broadcast apparatus 1 00, a reception apparatus 

200, and a security module 300. 
[01 01 ] Note that, In FIG. 1 , a scrambling key recording 
unit 1 0 which records scrambling keys and a content re- 
cording unit 1 1 which records content are shown for ex- 
planation. 

[0102] The security module 300 is a portable and in- 
telligent recording medium such as an I C card. The se- 
curity module 300 is, set in a predetermined position of 
the reception apparatus 200 and used together with the 
reception apparatus 200. 



[0103] The broadcast apparatus 100 shown in FIG. 1 
consists of a TS packetiztng unit 101 , a scrambling key 
list generation unit 102, a scrambiing process unit 103, 
40 an ECM generation unit 104, a multiplexing unit 105, a 
content acquisition unit 106, and a scrambling key ac- 
quisition unit 107. 

[01 04] The content acquisition unit 1 06 acquires con- 
tent including visual, audio, and text data recorded in the 
content recording unit 11. 

[01 05] The TS packetizing unit 1 01 converts the con- 
tent acquired by the content acquisition unit 1 08 into 
transport stream (hereafter abbreviated as TS") pack- 
ets. 

50 [01 06] Note that the TS packet has the fixed length of 
188 bytes as prescribed by the MPEG-2 standard. 
[0107] The scrambling key acquisition unit 107 ac- 
quires scrambling keys recorded In the scrambling key 
recording unit 10. 

55 [0108] The scrambling key list generation unit 102 gen- 
erates a scrambling key list base on the scrambling keys 
acquired by the scrambling key acquisition unit 1 07. 
[01 09] Note that the scrambiing key list Is represented 
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by scrambling key iist descriptors, for example, 
[01 1 0] FIG. 2 shows one example of the data structure 
of a scrambjing key list descriptor. 
[011 1 ] The scrambling key list descriptor shown In FIG. 
2 includes a scrambling key identifier (Wsjd) for identi- 
fying a scrambling key, th^ scramblihg key(Ks), and the 
number of TS packets to be scrambled with the scram- 
bling key(TS_packet_number). In the list, the scrambling 
key identifiers(Ks_id), the scrambling keys (Ks), and the 
number of TS packets are described as much as the 
number of scrambling keys. 

[01 1 2] The scrambling process unit 1 03 scrambles the 
content converted Into TS packets by the TS packetlzing 
unit 101 , based on the scrambling key list generated by 
the scrambling key list generation unit 102. The detailed 
description on the scrambling process unit 103 will be 
given later, 

[0113] The ECM generation unit 104 generates ECMs 
for normal reproduction {hereafter called "normal repro- 
duction ECM"), which are the same as In the conventional 
system, and also generates storage ECMs including the 
scrambling key list generated by the scrambling key list 
generation unit 102. 

[0114] Note that the storage ECM is used for repro- 
ducing the stored scrambled content. 
[0115] FIG. 3 shows one example of the data structure 
of a storage ECM. 

[01 1 6] The storage ECM shown in FIG.3 is generated 
by adding the scrambling key list descriptor as described 
above to a variable portion (a target to be encoded) In 

the main body of the ECM as prescribed by the ARIB 
(The Association of Radio Industries and Businesses) 
standard. 

[01 17] In a storage ECM, infonmation for distinguishing 
the storage ECM from a normal reproduction ECM is also 
embedded. For instance, different values may be set at 
the table identifiers described in the section header for 
the storage ECM and the normal reproduction ECM. Al- 
ternatively, different values may be set at the extended 
table identifiers for the both ECMs, while the same value 
being set at the table identifiers for them. 
[01 1 8] The multiplexing unit 1 05 attaches/attaches the 
generated nonmal reproduction ECM with/to the scram- 
bled content, multiplexes it with a storage ECM to pro- 
duce a TS, and broadcasts the TS. 
[01 1 9] The following describes transmission timing for 
the storage ECM. 

[0120] Since one scrambling key list has only to be 
transmitted for each piece of scrambled content, the stor- 
age ECM may be transmitted in atime period longerthan 
the transmission period for the conventional ECM. 
[0121] FIG. 4showstransmissiontimingforthe scram- 
bling key list. 

[0122] As shown in FIG. 4, in the OS digital broadcast- 
ing system, the storage ECM may be transmitted in the 
time period approximately ten times as long as for the 
conventional ECM. In the environment where ECMs can 
be securely stored without any reception errors and stor- 



age errors, one storage ECM has only to be transmitted 
while all of the scrambled content, associated with the 
storage ECM have been transmitted once. 
[0123] . FIG. 5 shows the detailed construction of the 

5 scrambling process unit 103. 

[0124] The scrambling process unit 1 03 shown in FIG. 
5 consists of a TS packet counting unitl.1 0, a scrambling 
key list holding unit 111. a scrambling unit 112, and a . 
scrambling key list interpretation unit 113. 

fo [0125] The TS packet counting unit 110 acquires the 
content converted into TS packets by the TS packetlzing 
unit 101 one TS packet at a time and passes it to the 
scrambling unit 112. The TS packet counting unit 110 
also counts the TS packet cumulative number indicating 
the ordinal position of the acquired TS packet counted 
from the beginn Ing of the content, and passes the number 
to th e scrambling key list interpretation unit 1 1 3. The TS 
packet counting unit 1 1 0 resets the TS packet cumulative 
number Into zero when other content starts to be proc- 

20 eased. 

[0126] The scrambling key list holding unit 111 ac- 
quires the scrambling key list generated by the scram- 
bling key list generation unit 102 and holds it therein. 
[0127] The scrambling key list interpretation unit 113 

25 extracts the scrambling key corresponding to the TS 
packet to be scrambled from the scrambling ikey list 
stored In the scrambling key list holding unit 111, based 
on the TS packet cumulative number passed from the 
TS packet counting unit 110, and passes the extracted 

30 key to the scrambling unit 1 12. 

[0128] FIG. 6 shows a relation between content and 
scrambling keys in a TS. 

[0129] As shown In FIG. 6, this TS consists of four hun- 
dreds of TS packets obtained by converting content to 
35 be scrambled. Scrambling keys are changed, every one 
hundred of TS packets. 

[0130] FIG. 7 shows the scrambling key list associated 
with the TS shown in FIG. 6. 

[0131] As shown in FIG. 7, in this scrambling key list, 
<o the scrambling key associated with the leading one hun- 
dreds of TS packets is Ksl, the scrambling key associ- 
ated with the TS packets from the Id^t to 200^^^ Is Ks2, 
the scrambling key associated with the TS packets from 
the 201 St to 300*^ is Ks3, and the scrambling key asso- 
45 elated with the TS packets from the 3018* to the 400*^ is 
Ks4. 

[0132] The scrambling unit 112 scrambles one TS 
packet passed from the TS packet counting unit 1 1 0 us- 
ing the scrambling key passed from the scrambling key 
50 list interpretation unit 1 1 3 and passes ittothe multiplexing 
unit 105. The scrambling unit 112 repeats this process 
until allTS packets have been processed. 

(Construction of Reception Apparatus and Security Mod- 

55 ule) 

[0133] The reception apparatus 200 shown in FIG. 1 
consists of a TS separation unit 201 , an HDD 202, a 
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scrambling key list holding unit 203. a descrambling proc- 
ess unit 204r and a reproduction unit 205. 
[0134^1 The' security mbdiiie 300 shown in F!G. 1 is 
made up of an ECM interpretation unit 301 . 
[0135] The TS sepai^tlon unit 201 receives a TS 
broadcast from the mUttipiexlTig unit 105,' distinguishes 
between a normal reproduction ECM and a storage ECM 
based on the value of the table identifier or the extended 
table identifier, and separates the storage ECM and 
scrambled content. 

[0136] The HDD 202 Is a recording medium such as a 
hard disk drive. The HDD 202 stores the storage ECM 
and the scrambled content separated by the TS separa- 
tion unit 201 . 

[0137] The ECM interpretation unit 301 extracts a 
scrambling i<ey list from the storage ECM stored in the 
HDD 202. 

[0138] The scrambling'key list holding unit 203 holds 
the scrambling key list extracted by the ECM interpreta- 
tion unit 301 . 

[0139] The descrambling process unit 204 descram- 
bles the scrambled content stored In the HDD 202 based 
on the scrambling key list held by the scrambling key list 
holding unit 203 and passes it to the reproduction unit 
205. Detailed description on the descrambling process 
unit 204 will be given later. 

[0140] The reproduction unit 205 reproduces the de- 
scrambled content. 

[0141] FIG. 8 shows the detailed construction of the 
descrambling process unit 204. 

[0142] The descrambling process unit 204 shown in 
FIG. 8 is made up of a TS packet extraction unit 21 0, a 
descrambling unit 21 1 , and a scrambling key list Inter- 
pretation unit 21 2. 

[01 43] The TS packet extraction unit 21 0 extracts the 
scrambled content stored in the HDD 202 one TS packet 
at a time to pass it to the descrambling unit 211. Also, 
the TS packet extraction unit 210 counts the TS packet 
index indicating shows the ordinal position of the extract- 
ed TS packet counted from the beginning of the content 
and passes the index to the scrambling key iist interpre- 
tation unit 212. Here, the TS packet extraction unit 210 
resets the TS packet index into zero when other content 
start to be processed. 

[0144] The scrambling key list interpretation unit 212 
extracts the scrambling key corresponding to the TS 
packet index pss.sed from the TS packet extraction unit 
210 from the scrambling key list held by the scrambling 
key list holding unit 203 and passes tt to the descrambling 
unit 211. 

[0145] The descrambling unit 211 descrambles one 
TS packet passed from the TS packet extraction unit 21 0 
using the scrambling key extracted by the scrambling key 
list interpretation unit 212 and passes it to the reproduc- 
tion unit 205. The descrambling unit 211 repeats this 
process until allTS packets have been processed. 



<OpGrations> 

(Operations of Broadcast Apparatus) 

' s [0146] FIG. 9 shows a procedure in the broadcasting 
process by means of the broadcast apparatus 100 ac- 
cording to the first embodiment of the invention^ 
[0147] Following describes the outline of the proce- 
dure with reference to FIG. 9. 

10 

(1) The content acquisition unit 1 06 acquires content 
such as image, sounds, and text data recorded in 
the content recording unit 1 1 (Step SI ). 

(2) The TS packetlzing unit 1 01 converts the content 
15 acquired by the content acquisition unit 1 06 into TS 

packets (Step S2). 

(3) The scrambling key acquisition unit 1 07 acquires 
the scrambling key recorded in the scrambling key 
recording unit 10 (Step S3). 

20 (4) The scrambling key list generation unit 1 02 gen- 
erates a scrambiing key list based on the scrambling 
key acquired by the scrambling key acquisition unit 
107 (Step S4), 

(5) The scrambling process unit 1 03 scrambles the 
25 content converted into TS packets by the TS pack- 
etlzing unit 101, based on the scrambiing key list 
generated by the scrambling key list generation unit 
102 (Step S5). 

(6) The ECM generation unit 1 04 generates a normal 
30 reproduction ECM and generates a storage ECM in- 
cluding the scrambiing key . list generated by the 
scrambling key list generation unit 102 (Step S6). 

(7) The multiplexing unit 1 05 associates/attaches the 
generated nonnal reproduction ECM to/with to the 

35 scrambled content, multiplexes it with the storage 
ECM to generate TS, and broadcasts theTS (Step 
S7). 

[0148] FIG. 10 shows a procedure in the scrambling 
40 process by means of the scrambling process unit 1 03 in 
detail. 

[0149] Following describes the outline of the detailed 
procedure in the scrambling process, with reference to 
FIG. 10. 

45 

(1) The TS packet counting unit 110 resets the TS 
packetcumU la tl v e n u mb e r i n to ze ro (St e p S 1 1 ) . 

(2) The TS packet counting unit 1 10 judges whether 
there are unprocessed TS packets or not (Step SI 2). 

50 If there are no any unprocessed TS packets, the 
scrambling process ends. 

(3) If there are unprocessed TS packets, the TS 
packet counting unit 1 10 acquires one unprocessed 
TS packet to pass It to the scrambling unit 1 12, and 

55 counts the TS packet cumulative number to pass it 
to the scrambling key list interpretation unit 113 (Step 
S13). 

(4) The scrambling key list interpretation unit 113 
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extracts the scrambling key corresponding to tine TS 
packet now being processed from the scrambling 
key list stored in the scrambling key list holding unit 
111, based on the TS packet cumulative number 
passed from the TS packet counting unit 110 (Step s 
S14). 

(5) The scrambling unit 11 2 scrambles one TS pack- 
et passed from the TS packet counting unit 11 0 using 
the scrambling key passed from the scrambling key 
list interpretation unit 1 1 3 and passes it to the mul- to 
tiplexing unit 1 05. Then, the procedure returns up- 
ward to process the successive TS packet(Step 
SI 5). 

(Operations of Reception Apparatus) 

[0150] FIG. 1 1 shows a procedure in the reception and 
storage processes by means of the reception apparatus 
200 and the security module 300 according to the first 
embodiment of the invention. 

[01 51 ] Following describes the outline of the process- 
es with reference to FIG. 1 1 . 

(1 ) The TS separation unit 201 receives a TS broad- 
cast from the multiplexing unit 1 05. Then, the TS 25 
separation unit 201 distinguishes a normal reproduc- 
tion ECM and a storage ECM based on the value of 

the table identifier or the extended table identifier, 
and separates the storage EClVI and scrambled con- 
tent (Step 821). 30 

(2) The HDD 202 stores the storage ECM and the 
scrambled content separated by the TS separation 
unit 201 (Step S22). 

[01 52] Note that, the storage ECM and the scrambled 3S 
content may be separated not at this stage but later (e.g., 
before using tiiem). 

[0153] FIG. 12 shows a procedure in the reproduction 
process after the reception and storage processes by 
means of the reception apparatus 200 and the security 4o 
module 300 according to the first embodiment of the in- 
vention. 

[0154] Following describes the outline of the proce- 
dure in the reproduction process, with reference to FIG. 



(1) The ECM interpretation unit 301 extracts the 
scrambling key list from the storage ECM stored in 
the HDD 202 (Step S31). 

(2) The scrambling key list holding unit 203 holds the so 
scrambling key list extracted by the ECM interpreta- 
tion unit 301 (Step S32). 

(3) The descrambllng process unit 204 descrambles 
the scrambled content stored in the HDD 202 based 

on the scrambling key list held by the scrambling key ss 
list holding unit 203 and passes it to the reproduction 
unit 205 (Step S33). 

(4) The reproduction unit 205 reproduces the de- 



scrambled content (Step S34). 

[0155] FIG. 1 3 shows a procedure in the descrambiing 
process by means of the descrambiing process unit 204 
in detail. 

[0156] Following describes the outline of the detailed 
procedure in the descrambiing process, with reference 
to FIG. 13. 

(1 ) The TS packet extraction unit 21 0 resets the TS 
packet index into zero when other content starts to 
be processed (Step S41 ). 

(2) TheTS packet extraction unit 21 0 Judges whether 
there are unprocessed TS packets or not (Step 842). 
If there are not any unprocessed TS packet, the de- 
scrambling process ends. 

(3) If there are unprocessed TS packets, the TS 
packet extraction unit 210 extracts one unprocessed 
TS packet to pass It to the descrambiing unit 21 1 . 
Also, the TS packet extraction unit 210 counts the 
TS packet index to pass it to the scrambling key list 
interpretation unit 212 (Step S43). 

(4) The scrambling key list interpretation unit 212 
extracts the scrambling key corresponding to the TS 
packet index passed from the TS packet extraction 
unit 210, from the scrambling key list held by the 
scrambling key list holding unit 203, and passes it to 
the descrambiing unit 21 1 (Step S44). 

(5) The descrambiing unit 21 1 descrambles one TS 
packet passed from the TS packet extraction unit 
210 using the scrambling key extracted by the 
scrambling key list interpretation unit 21 2 and passes 
It to the reproduction unit 205. Then, the procedure 
returns upward to process the successive TS packet 
(Step S45). 

[0157] Following describes the procedure of the par- 
ticular reproduction process after the above-described 
reception and storage processes. 
[0158] FIG. 1 4 is a schematic view showing an Image 
stream in the MPEG-2 coding system. 
[0159] As shown in FIG. 14, according to the MPEG- 
2 coding system, the image stream consists of three kinds 
of pictures: I pictures (intraframe-coded picture), B pic- 
tures (bidirectional frame), and P pictures (predictive pic- 
ture). Among these pictures, only I picture can be drawn 
and displayed based solely on the data that It contains. 
[01 60] Therefore, the fast f onward reproduction mode, 
which is one of typical particular reproduction processes, 
can be realized by selecting only I pictures to reproduce 
content 

[0161] FIG. 1 5 shows a TS obtained by converting the 
image stream shown in FIG. 14. 

[0162] In FIG. 15. the diagonally shaded portions are 
the TS packets obtained by converting the I pictures 
shown in FIG. 14. Pictures 11 , 12. 13, and 14 are converted 
Into TSP1 to TSP4, TSP101 to TSP104. TSP201 to 
TSP204, andTSP30l toTSP304, respectively. 
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[01 63] Th« procedure of the fast forward reproduction, 
which is one of typical particular reproduction processes, 
is alnrtost the same as that of the reproduction process 
shown in FIG. 12. However, the detailed procedure In 
the descrambling process by means of the descrambling 
process unit 204 is different from that shown in FIG. 12. 
[0164] FIG. 16 shows a procedure In the descrambling 
process in the fast-forward reproduction mode in detail. 
Note that the same numerals are assigned to the step in 
which the same processes as in FIG. 13 are conducted, 
and explanation for them has been omitted. 
[0165] Following describes the outline. of the detailed 
procedure in the descrambling process in the fastf onward 
reproduction mode, with reference to FIGS. 7 and 13 to 
16. 

(1 ) Same as the step (1 ) in FIG. 1 3 (Step S41 ) 

(2) Same as the step (2) in FIG. 13 (Step S42) 

(3) Same as the step (3) in FIG. 13 (Step S43) 
For Instance, when extracting TSP1 shown In FIG. 
15, the TS packet extraction unit 21 0 counts the TS 
pacicet index as one, because TSP1 is the first pack- 
et. 

(4) The descrambling process unit 204 judges 
whetherthe process is the fast forward reproduction 
process or not (Step S51 ). If the process is not the 
fast forward reproduction process, the procedure 
goes to the process for extracting a scrambling key 
(to Step S44). 

(5) If the process is the fast fonvard reproduction 
process, the descrambling process unit 204 Judges 
whether the extracted TS packet is the TS packet 
obtained by converting an I picture or not (Step S52). 
If the packet is not the TS packet obtained by con- 
verting an i picture, the procedure returns upward to 
process the successive TS packet. 

r>iote that, as one method for Judging whether the 
extracted TS packet is the TS packet obtained by 
converting an I picture or not, the broadcast appa- 
ratus may embed the information indicative of I pic- 
ture In the unscrambled portion in the TS packet, and 
the reception apparatus may make a judgement 
based on the Infomiation. The Japanese Lald-Open 
Patent Application No. 8-340541 discloses such a 
method. 

When extracting the TSP1 shown in FIG. 15, the 
descrambling process unit 204 judges the T3P1 as 
the TS packet obtained by converting an I picture. 

(6) Same as the step (4) in FIG. 13 (Step S44) 
For instance, the scrambling key list interpretation 
unit 212 extracts the scrambling key Ksl corre- 
sponding to the TS packet index 1 from the scram- 
bling key list shown in FIG. 7. 

(7) Same as the step (5) in FIG. 13 (Step S45) 

[0166] For instance, the descrambling unit 211 de- 
scrambles TSP2 shown In FIG. 15 using the scrambling 
key Ks1. 



[0167] Similarly. TSP1 to TSP4, TSP101 to TSP104, 
TSP201 to TSP204, and TSP301 to TSP304 are de- 
scrambled with the scrambling keys Ksl , Ks2, Ks3, anti 
ks 4, respectively. 

5 [0168] Note that, The reverse rep roductlori . process- 
can be realized by reversing the extraction oi-derof TS- 
packets in the normal reproduction process. 
[0169] In addition, the fast reverse reproduction proc- 
ess can be realized by reversing the extraction order of 

10 TS packets In the fast forward reproduction process. 
[0170] Moreover, the random access reproduction 
process can be realized by altering the starting position 
of the TS packet to be extracted. 
[0171] As stated above, according to the first embod- 

is iment, various particular reproduction processes can be 
realized by extracting a scrambling key corresponding to 
any one of TS packets from the scrambling key list using 
the TS packet index. 



<Summary> 

[0172] The broadcast apparatus according to the sec- 
ond embodiment of the invention has the same construc- 
tion as in the above first embodiment, but the reception 
apparatus and the security module have different con- 
structions. 

[0173] The first embodiment is predicted on that infor- 
mation does not leak out of the reception apparatus so 
as to provide adequate security of Information, and there- 
fore the scrambling key list is held in the reception appa- 
ratus. Whereas, according to the second embodiment, 
the scrambling key list is held in the security module and 
not in the reception apparatus, whereby the security 
against the leakage of the scrambling key list can be im- 
proved. 

<Overall Construction> 

[0174] FIG. 17 shows a portion of the construction of 
a system for providing a storage service according to the 
second embodiment of the invention. 
[0175] The system shown in FIG. 17 is made up of a 
broadcast apparatus 100, a reception apparatus 400, 
and a security module 500. Note that the broadcast ap- 
paratus is not illustrated In FIG. 17, because the appa- 
ratus is the same as in the first embodiment. 
[0176] The security module 500 is a portable and in- 
telligent recording medium such as an IC card. The se- 
curity module 500 is set in a predetermined position of 
the reception apparatus 400 and used together with the 
reception apparatus 400. 

[0177] Note that construction elements which have the 
same functions as those in the first embodiment have 
been given the same reference numerals and their ex- 
planation has been omitted. 
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(Construction of Broadcast Apparatus) 

[0178] : The construction of the broadcast apparatus 
has been omitted, because It is the same as in the first 
embodiment. 

(Constructions of Reception Apparatus and Security 
Module) 

[0179] The reception apparatus shown in FIG. 17 is 
made up of a TS separation unit 201, an HDD 202, a 
descrambling process unit 401, and a reproduction unit 
205. 

[01 80] The security module shown in FIG . 1 7 is made 
up of an ECM interpretation unit 301, a scrambling l<ey 
list holding unit 501, and a scrambling key list interpre- 
tation unit 502. 

[0181] The scrambling key iist holding unit 501 holds 
the scrambling key list extracted by the ECM Interpreta- 
tion unit 301. 

[01 82] The descrambling process unit 401 extracts the 
scrambled content stored in the HDD 202 one TS packet 
at a time and counts the TS packet index to pass them 
to the scrambling key list interpretation unit 502. Then, 
on receiving the scrambling key corresponding to the TS 
packet index from the scrambling key list interpretation 
unit 502, the descrambling process unit 401 descrambles 
the TS packet using the scrambling key and passes It to 
the reproduction unit 205. Detailed description on the de- 
scrambling process unit 401 will be given later. 
[0183] The scrambling key list Interpretation unit 502 
extracts the scrambling key corresponding to the TS 
packet index passed from the descrambling process unit 
401 , from the scrambling key iist held by the scrambling 
key list holding unit 501, and passes the extracted key 
to the descrambling process unit 401. 
[0164] FIG. 1 B shows the detailed construction of the 
descrambling process unit 401 . 
[0185] The descrambling process unit 401 shown in 
FIG. 1 8 is made up of the TS packet extraction unit 410 
and the descrambling unit 41 1 . 

[01 86] The TS packet extraction unit 41 0 extracts the 
scrambled content stored in the HDD 202 one TS packet 
at a time to pass it to the descrambling unit 41 1 . Also, 
the TS packet extraction unit 41 0 counts the TS packet 
index Indicating the ordinal position of the extracted TS 
packet counted from the beginning of the content and 
passes it to the scrambling key list interpretation unit 502. 
Here, the TS packet extraction unit 410 resets the TS 
packet Index into zero when other content start to be 
processed, 

[0187] The descrambling unit 411 descrambles one 
TS packet passed from the TS packet extraction unit 41 0 
with the scrambling key passed from the scrambling key 
list interpretation unit and passes It to the reproduction 
unit 205. The descrambling unit 41 1 repeats this process 
until all TS packets have been processed. 



5 905 B1 28 

(Operations). 

[0188] Since operations in this embodiment are the 
same as in the first embodiment, their explanation has 

5 been omitted. 

[0TB9] As- described above, according to the second 
embodiment of the invention, various particular repro- 
duction processes can be realized, while improving the 
security against the leakage of the scrambling key list by 

10 extracting a scrambling key corresponding to any one of 
TS packets from the scrambling key iist held in the se- 
curity module. 

Embodiment 3 

IS 

<Summary> 

[01 90] According to the third embodiment of the inven- 
tion, correspondences between TS packets and scram- 

20 bling keys are described In the ECM, and the value of 
Continuity Counter (CC) described in the unscrambled 
portion in the TS packet is utilized, whereby the number 
of TS packets to be scrambled (TS_packet_number) 
does not need to be described In the scrambling key list 

25 descriptor, which leads to decrease in the amount of data 
to be transmitted. 

<Overall Construction> 

30 [0191] FIG. 19 shows a portion of the construction of 
a system for providing a storage service acconiiing to the 
thind embodiment of the invention. 
[0192] The system shown in FIG. 19 is made up of a 
broadcast apparatus 600, a reception apparatus 700, 

35 and a security module 300. 

[01 93] Note that construction elements which have the 
same functions as those in the first embodiment have 
been given the same reference numerals and their ex- 
planation has been omitted. 

40 

(Construction of Broadcast Apparatus) 

[0194] The broadcast apparatus shown in FIG. 19 is 
made up of a TS packetizing unit 1 01 , a scrambling key 
4S list generation unit 102, a scrambling process unit 601, 
an ECM generation unit 104, a multiplexing unit 105, a 
content acquisition unit 106, and a scrambling key list 
acquisition unit 107. 

[0195] The scrambling process unit 601 scrambles the 
50 content converted Into TS packets by the TS packetizing 
unit 101 based on the scrambling key list generated by 
the scrambling key list generation unit 1 02. 
[0196] FIG. 20 shows the detailed construction of the 
scrambling process unit 601. 
55 [0197] The scrambling process unit 601 shown In FIG. 
20 is made up of a scrambling key identifier calculation 
unit 610, a TS packet header interpretation unit 61 1, a 
scrambling key list holding unit 612, a scrambling unit 
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613, and a scrambling key list interpretation unit 614. 
[0198] The TS packet header interpretation unit 611 
acquires the content converted. Into TS packets 'by:the 
TS packetizihg unit 1 01- orie:-TS packet at a time to pass 
itto the scrambling unit 613. Also, the TS packet header 
interpretation unit 611 reads the value of Continuity' 
Counter (CC) to pass it to the scrambling key Identifier 
calculation unit 610. 

[0199] Note that the CC is a cyclic counter using the 
four-bit value of the header in the TS packet as prescribed 
by the MPEG-2 coding system as the interhational stand- 
ard. The CC increments one by one from zero to fifteen, 
and then returns to zero, which is used to detemnlne if 
any TS packets with the same packet ID are abandoned 
partway. 

[0200] The scrambling key Identifier calculation unit 
610 calculates a scrambling key identifier using the value 
of the CC passed from the TS packet header interpreta- 
tion unit 61 1 and passes it to the scrambling key list in- 
terpretation unit 614. 

[0201] One method for calculating a scrambling key 
identifier from the value of the CC is that the value of "CC 
mod n" (where 1 ^n^ 16) is set at the scrambling key 
identifier. Here, "A mod B" indicates the remainder ob- 
tained by dividing A by B. 

[0202] For instance, in the case of n=1 6, there are six- 
teen kinds of scrambling key identifiers (i.e., 0 to 15). As 
for the TS packet whose value Is 2. for example, the 
scrambling key identifier Is 2, because the remainder ob- 
tained by dividing 2 by 1 6 is 2. 

[0203] The scrambling key list holding unit 612 ac- 
quires and holds the scrambling key list generated by the 
scrambling key list generation unit 1 02. 
[0204] FIG, 21 shows the scrambling key list In the 
case that the value of CC mod 1 6" is set at the scrambling 
key identifier. 

[0205] The scrambling key list interpretation unit 614 
extracts the scrambling key corresponding to the TS 
packet to be scrambled from the scrambling key list 
stored in the scrambling key list holding unit 612, based 
on the scrambling key identifier passed from the scram- 
bling key Identifier calculation unit 610 and passes it to 
the scrambling unit 613. 

[0206] For instance, in the case that the scrambling 
key Identifier is 2, the scrambling key Ks3 is extracted 
according to the scrambling key list shown in FIG. 21 . 
[0207] The scrambling unit 613 scrambles one TS 
packet passed from the TS packet header interpretation 
unit 61 1 using the scrambling key passed from the scram- 
bling key list interpretation unit 614 and passes it to the 
multiplexing unit 105. The scrambling unit 613 repeats 
this process until all TS packets have been processed. 
[0208] For instance, in the case that the scrambling 
key Ks3 is extracted, scrambling process Is conducted 
with the scrambling key Ks3. 

[0209] That is the explanation for the case of n=1 6. 
Naturally, n is not limited to 1 6. 

[0210] That is, n may be any number between 1 and 



15. After generating a scrambling key list by changing 
the value of n, the number of used scrambling keys can 
be easily altered without generating the list again! 
For instance, by changing the value of h to 4 without 
changing the scrambling key list shown In FIG. 21, the 
value of identifier can be any number between 0 and 3. 
As a result, the four types of scrambling keys (Ks1 . Ks2, 
Ks3, and Ks4)can be used. Note that the value of n may 
be stored as a calculation method or a fixed value in 
advance, and the method and the value may be de- 
scribed in the variable portion in the storage EOM shown 
in FIG. 3. 

[0211] Alternatively, instead of calculating a scram- 
bling key Identifier from the value of CC, the scrambling 
key Identifier may be calculated from the specific bits of 
the Program Clock Reference (PCR) orthe Original PCR 
(OPCR). which are also prescribed by the MPEG-2 cod- 
ing system as the international standard. 
[0212] For example, using the specific four-bit values 
in the PCR or OPCR, the scrambling key identifier may 
be calculated in the same manner as in the above proc- 
ess using the value of CC. 

[0213] Otherwise, instead of using the value pre- 
scribed by the MPEG-2 coding system, users may direct- 
ly describe the value of the scrambling key identifier in 
the area where the application Is not specified but which 
users can utilize freely, such as private data area in the 
Adaptation Field. 

30 (Constmctlons of Reception Apparatus and Security 
Module) 

[0214] The reception apparatus shown in FIG. 19 is 
made up of a TS separation unit 201, an HDD 202, a 

35 scrambling key list holding unlt203, a descrambling proc- 
ess unit 701, and a reproduction unit 205. 
[0215] The descrambling process unit 701 descram- 
bles the scrambled content stored in the HDD 202, based 
on the scrambling key list held by the scrambling key list 

40 holding unit 203 and passes it to the reproduction unit 
205. 

[0216] FIG. 22 shows the detailed construction of the 
descrambling process unit 701 . 
[0217] The descrambling process unit 701 shown in 
45 FIG. 22 Is made up of a TS packet extraction unit 710, a 
scrambling key identifier calculation unit 71 1 , a descram- 
bling unit 712, and a scrambling key list Interpretation 
unit 713. 

[021 8] The TS packet extraction unit 71 0 extracts the 
50 scrambled content stored in the HDD 202 one TS packet 
at a time to pass it to the descrambling unit 712. Also, 
the TS packet extraction unit 71 0 reads the value of the 
CC in the extracted TS packet to pass Itto the scrambling 
key identifier calculation unit 71 1 . 
S5 [0219] The scrambling key Identifier calculation unit 
71 1 calculates a scrambling key identifier from the value 
of the CC passed from the TS packet extraction unit 71 0 
and passes Itto the scrambling key list interpretation unit 
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713. 

[0220] The scrambling key list interpretation . unit 713 
extracts tlie scrambling key corresponding to the TS. 
packet to be scrambled fronn the scrambling key list 
stored In the. scrambling key list holding unit 203, based 
on the scrambling key identifier passed from the scram- 
bling key identifier calculation unit 71 1, and.passes It to 
the descrambling unit 712, 

[0221] The descrambling unit 712 descrambles one 
TS packet passed from the TS packet extraction unit 71 0 
using the scrambling key passed from the scrambling 
key list interpretation unit 713 and passes It to the repro- 
duction unit 205. The descrambling unit 71 2 repeats this 
process until all TS packets have been processed. 

<Operatlons> 

(Operations of Broadcast Apparatus) 

[0222] FIG. 23 shows a procedure in the broadcasting 
process by means of the broadcast apparatus 600 ac- 
cording to the third embodiment of the Invention. Note 
that the same numerals are assigned to the step where 
the same processes as In FIG. 9 are conducted, and 
explanation for them has been omitted. 
[0223] Following describes the outline of the proce- 
dure in the broadcasting process, with reference to FIG. 
23. 

(1) Same as the step (1) in FIG. 9 (Step S1) 

(2) Same as the step (2) in FIG.9 (Step S2) 

(3) Same as the step (3) In FIG.9 (Step S3) 

(4) Same as the step (4) in FIG.9 (Step S4) 

(5) The scrambling process unit 601 scrambles the 
content converted into TS packets by the TS pack- 
etizing unit 101, based on the scrambling key list 
generated by the scrambling key list generation unit 
102 (Step 351). 

(6) Same as the step (6) in FIG,9 (Step S6) 

(7) Same as the step (7) in FIG. 9 (Step S7) 

[0224] FIG. 24 shows a procedure in the scrambling 
process by means of the scrambling process unit 601 in 
detail. 

[0225] Following describes the outline of the detailed 
procedure in the scrambling process, with reference to 
FIG. 24. 

(1 ) The TS packet header Interpretation unit 61 1 
Judges whetherthere are any unprocessedTS pack- 
ets or not (Step S61). If there are not any unproc- 
eased TS packets, the scrambling process ends. 

(2) !f there are unprocessed TS packets, the TS 
packet header interpretation unit 611 acquires one 
unprocessed TS packet to pass it to the scrambling 
unit 613, and reads the value of the GC to pass it to 
the scrambling key identifier calculation unit 610 
(Step S62). 



(3) The scrambling key identifier calculation unit 61 0 
calculates a scrambling key identifier from the value 
Of the GC passed from the TS .ppicket header inter- • 
pretation unit 61 1 to pass If to the Sicrambling key list 

5 Interpretation unit 614 (Step S63). 

(4) The scrambling key list Interpretation unit 614. .. 
extracts the scrambling key corresponding to the TS 
packet now being processed, from the scrambling 
key list stored in the scrambling key list holding unit 

10 612, based on the scrambling key identifier passed 
from the scrambling key identifiercalculatlon unltBI 0 
and passes the extracted key to the scrambling unit 
613 (Step 864). 

(5) The scrambling unit 61 3 scrambles one TS pack- 
15 et passed from the TS packet header interpretation 

unit 61 1 using the scrambling key passed from the 
scrambling key list interpretation unit 61 4 and passes 
It to the multiplexing unit 105. Then, the procedure 
returns upward to process the successive TS packet 
20 (Step S65) 

(Operations of Reception Apparatus) 

[0226] Explanation of the procedure in the reception 
25 and storage processes by means of the reception appa- 
ratus 700 and the security module 300 according to the 
third embodiment of the invention has been omitted/be- 
cause they are the same as in the first embodiment. 
[0227] FIG. 25 shows a procedure in the reproduction 
30 process after the reception and storage processes by 
means of the reception apparatus 700 and the security 
module 300 according to the third embodiment of the 
invention. Note that the same numerals are assigned to 
the step where the same processes as in FIG. 12 are 
35 conducted, and explanation for them has been omitted. 
[0228] Following describes the outline of the proce- 
dure in the reproduction process, with reference to FIG. 
25. 

40 (1) Same as the step (1) in FIG. 12 (Step S31) 

(2) Same as the step (2) In FIG. 12 (Step S32) 

(3) The descrambling process unit 701 descrambles 
the scrambled content stored in the HDD 202 based 
on the scrambling key list held by the scrambling key 

45 list holding unit 203 and passes the descrambled 
content to the reproduction unit 205 (Step S71). 

(4) Same as the step (4) in FIG. 12 (Step S34) 

[0229] FIG. 26 shows a procedure in the descrambling 
50 process by means of the descrambling process unit 701 
in detail. 

[0230] Following describes the outline of the detailed 
procedure in the descrambling process, with reference 
to FIG. 26. 

55 

( 1 ) The TS packet extraction u nit 71 0 j udges wheth er 
there are any unprocessed TS packets or not (Step 
881). If there are no any unprocessed TS packets, 
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the descramtaling process ends. 

(2) . If there are unprocessed TS packets, the TS 
packet extraction unit 710 extracts one unprocessed 
TS packet to pass it to the scrambling unit 712, and 
reads the value of the CC of the extracted TS packet 
to pass it to the. scrambling key identifier calculation 
unit 711 (Step 382). 

(3) The scrambting key identifier calculation unit 71 1 
calculates a scrambling key identifier from the value 
of the CC passed from the TS packet extraction unit 
71 0 and passes it to the scrambling key list interpre- 
tation unit 713 (Step S83). 

(4) The scrambling key list interpretation unit 713 
extracts the scrambling key from the scrambling key 
list stored in the scrambling key list holding unit 203, 
based on the scrambling key identifier passed from 

the scrambling key identifier calculation unit 71 1 and 
passes the extracted key to the descrambting unit 
712 (Step S84). 

(5) The descrambling unit 71 2 descrambles one TS 
packet passed from the TS packet extraction unit 
710 using the scrambling key passed from the 
scrambling key list interpretation untt71 3 and passes 
the descrambled TS packet to the reproduction unit 
205. Then, the procedure returns upward to process 
the successive TS packet(Step S85). 

[0231] As stated above, according to the third embod- 
iment of the Invention, various particular reproduction 
processes can be realized by extracting a scrambling key 
corresponding to any one of TS packets from the scram- 
bling key list using the value of CC. 
[0232] Note that, Instead of the value of CC, any one 
of the number of TS packets, the cumulative amount of 
data, a relative reproduction time, and an identifier for a 
scrambling key may be used. 

Embodiment 4 

<Summary> 

[0233] A system for providing a storage service ac- 
cording to the fourth embodiment of the invention con- 
sists of a broadcast apparatus, a reception apparatus, 
and a security module. 

[0234] Unlike the first embodiment, the broadcast ap- 
paratus according to the fourth embodiment does not 
generate the scrambling key list. Instead, the broadcast 
apparatus in this embodiment adds auxiliary Information 
including identifying information on the scrambled con- 
tent such as packet numbers so as to help the reception 
apparatus to generate a scrambling key list, the scram- 
bling keys, and the like, to the normal reproduction ECM 
to broadcast It together with the scrambled content. 
[0235] The security module, which Is set and integrate 
ed with the reception apparatus in a predetermined po- 
sition, receives the normal reproduction ECM and the 
scrambled content, stores the scrambled content while 



generating a scrambling key list based on the auxiliary 
infonrjation added to the normal reproduction ECM, and 
sequentially descrambles the scrambled content iising 
the stored scrambling key list. - ' 

s 

<Overall Construction> 

[0236] FIG. 27 shows the construction of a system for 
providing a storage service according to the fourth em- 
fo bodiment of the invention. 

[0237] The system shown in FIG. 27 is made up of a 
broadcast apparatus BOO, a reception apparatus 900, 
and a security module 1 000. 

[0238] The security module 1 000 is a portable and In- 
teliigent recording medium such as an IC card. The se- 
curity module 1 000 is set in a predetermined position of 
the reception apparatus 900 and used together witli the 
reception apparatus 900. 

[0239] Note that construction elements which have the 
20 same functions as those in the first embodiment have 
been given the same reference numerals and the same 
names and their explanation has been omitted. 

(Construction of Broadcast Apparatus) 

25 

[0240] Tfie broadcast apparatus 800 shown in FIG. 27 
is made up of a TS packetlzing unit 101, an auxiliary 
information generation unit 801 , a scrambling process 
unit 802, an ECM generation unit 803, a multiplexing unit 
30 804. a content acquisition unit 1 06. and a scrambling key 
acquisition unit 107. 

[0241] The auxiliary infomiatlon generation unit 801 
generates auxiliary infonmation based on the scrambling 
key acquired by the scrambling key acquisition unit 107. 
35 [0242] Note that the auxiliary Information is represent- 
ed by scrambling key list generation descriptors, for ex- 
ample. 

[0243] FIG. 28 shows one example of the data struc- 
ture of the scrambling key list generation descriptor. 

40 [0244] The scrambling key list descriptor shown in FIG. 
28 Includes a scrambling key Identifier (Ksjd) for iden- 
tifying a scrambling key, the scrambling key(Ks), and the 
number of TS packets to be scrambled with the scram- 
bling key (TS_packet_n umber). 

^5 [0245] The scrambling process unit 802 scrambles the 
content converted into TS packets by the TS packetizing 
unit 101, based on the auxiliary infomiation generated 
by the auxiliary infomnation generation unit 801 . The de- 
tailed description on the scrambling process unit 802 will 

so be given later. 

[0246] The ECM generation unit 803 generates a nor- 
mal reproduction ECM. and adds the auxiliary informa- 
tion generated by the auxiliary information generation 
unit 801 to the normal reproduction ECM. 

55 [0247] FIG. 29 shows one example of the data struc- 
ture of a normal reproduction ECM, to which the scram- 
bling key list generation descriptor is added. 
[0248] The normal reproduction ECM shown in FIG. 
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29 is.generated by adding the scrambling key iist gener- 
ation descriptor as described above to a variable portion 
(a target to be encoded) in the main body of the ECM as - 
prescribed by the ARIB (The "Association of Radio Indus- 
tries and Businesses) standard. 

[0249] The multiplexing unit 804 associates/attaches 
the scrambled content wlthAo the generated nomna! re- 
production ECM to produce a TS, and broadcasts.the TS. 
[0250] FIG. 30 shows the detailed construction of the 
scrambling process unit B02. 

[0251 ] The scrambling process unit 802 shown in FIG. 

30 Is made up of a TS paclcet counting unit 810, an aux- 
iliary infonnation holding unit 81 1 , a scrambling unit 812, 
and an auxiliary infonrjation Interpretation unit 813. 
[0252] The TS packet counting unit 810 acquires the 
content converted into TS pacl<ets by the TS packetizing 
unit 1 01 one TS packet at a time and passes it to the 
scrambling unit 812. The TS packet counting unit 110 
also counts the TS packet cumulative number showing 
the ordinal position of the acquired TS packet counted 
from the beginning ofthecontent, and passes the number 
to the auxiliary infonnation interpretation unit 813. The 
TS packet counting unit 81 0 resets the TS packet cumu- 
lative number into zero when other content starts to be 
processed. 

[0253] The auxiliary infonmation holding unit 811 ac- 
quires and holds the" auxiliary infonnation generated by 
the auxiliary information generation unit 801. 
[0254] The auxiliary information interpretation unit 813 
extracts the scrambling key corresponding to the TS 
packet to be scrambled from the auxiliary information 
stored in the auxiliary info mnation holding unit 81 1 , based 
on the TS packet cumulative number passed from the 
TS packet counting unit 810, and passes the extracted 
key to the scrambling unit 81 2. 

[0255] The scrambling unit 812 scrambles one TS 
packet passed from the TS packet counting unit 81 0 us- 
ing the scrambling key passed from the auxiliary infor- 
mation interpretation unit 81 3 and passes the scrambled 
TS packet to the multiplexing unit 804. The scrambling 
unit 812 repeats this process until all TS packets have 
been processed. 

(Constructions of Reception Apparatus and Security 
Module) 

[0256] The reception apparatus 900 shown in FIG. 27 
is made up of a TS separation unit 901, an HDD 902, a 
scrambling key list generation unit 903, a scrambling key 
list holding unit 904, a descrambling process unit 905, 
and a reproduction unit 206. 

[0257] The security module 1 000 shown in FIG. 27 is 
made up of an ECM interpretation unit 1001. 
[0258] The TS separation unit 901 receives the TS 
broadcast by the multiplexing unit 804, and separates a 
nomnal reproduction ECM and scrambled content. 
[0259] The HDD 902 is a recording medium such as a 
hard disk drive. The HDD 902 stores the normal repro- 
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, . duction ECM and the scrambled content separated by 
the TS separation unit 901 . 

[0260] The ECM interpretation unit 1 001 extracts aux- 
iliary information from the stored normal reproduction " 

5 ECM. 

[0261] The scrambling key list generation unit 903 gen- 
erates a scrambling key list based on the auxiliary infor- 
mation extracted by the ECM interpretation unit 1 001. 
[0262] the scrambling key list holding unit 904 holds 
10 the. scrambling key list generated by the scrambling key 
list generation unit 903. 

[0263] The descrambling process unit 905 descram- 
bles the scrambled content stored in the HDD 202 based 
on the scrambling key list held by the scrambling key iist 
15 holding unit 904, and passes the descrambled content 
to the reproduction unit 205. 

[0264] FIG. 31 shows the detailed construction of the 
descrambling process unit 905. 

[0265] The descrambling unit 905 shown in FIG. 31 is 
20 rnade up of a TS packet extraction unit 910, a descram- 
bling unit 91 1 , and a scrambling key list interpretation 
unit 912. 

[0266] The TS packet extraction unit 91 0 extracts the 
scrambled content stored in the HDD 902 one TS:packet 

25 at a time and passes it to the descrambling unit 91 1 . The 
TS packet extraction unit 91 0 also counts the TS packet 
index showing the ordinal position of the acquired TS 
packet counted from the beginning of the content, and 
passes the number to the scrambling key list interpreta- 

30 tion unit 912. The TS packet extraction unit 91 0 resets 
the TS packet index into zero when other content starts 
to be processed. 

[0267] The scrambling key list interpretation unit 912 
extracts the scrambling key corresponding to the TS 
35 packet index passed from the TS packet extraction unit 
910 from the scrambling key list held by the scrambling 
key list holding unit 904, and passes the extracted key 
to the descrambling unit 91 1. 

[0268] The descrambling unit 91 1 descrambles one 
40 TS packet passed from the TS packet extraction unit 91 0 
using the scrambling key extracted by the scrambling key 
list interpretation unit 912 and passes the descrambled 
TS packettothe reproduction unlt205.The descrambling 
unit 91 1 repeats this process until all TS packets have 
45 been processed. 

<Operations> 

(Operations of Broadcast Apparatus) 

50 

[0269] FIG. 32 shows a procedure in the broadcasting 

process by means of the broadcast apparatus 800 ac- 
cording to the fourth embodiment of the invention. 
[0270] Following describes the outline of the proce- 
ss dure in the broadcast process, with reference to FIG. 32. 

(1) Same as the step (1) in FIG. 9 (Step SI) 

(2) Same as the step (2) in FIG. 9 (Step S2) 
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(3) Same as the step (3) in FIG. 9 (Step S3) 
(4>The auxiliary Infomiation generatiorr unit BOrgen- 
erates auxiliary Information based on thescrar^ibling 
key acquired by the scrambling key acquisition unit 
107 (Step 891). ^ 

(5) . The scrambling process unit 802 scrambles the 
content converted into TS packets by the TS pack- 
etizing unit 101 , based on the auxiliary information 
generated by the auxiliaiy information generation 
unit B01 (Step S92). 

(6) The ECM generation unit 803 generates a normal 
reproduction ECM and adds the auxiliary information 
generated by the auxiliary infomiation generation 
unit 801 to the nonmal reproduction ECM (Step S93). 

(7) The multiplexing unit 804 associates/attaches the is 
generated normal reproduction ECM with/to the 
scrambled content to produce TS and broadcasts 
the TS (Step S94). 

[0271] FIG. 33 shows a procedure in the scrambling 20 
process by means of the scrambling process unit 802 in 
detail. 

[0272] Following describes the outline of the detailed 
procedure in the scrambling process, with reference to 
FIG. 33. 25 

(1) The TS packet counting unit 810 resets the TS 
packet cumulative number into zero (Step SI 01). 

(2) The TS packet counting unit 81 0 Judges whether 
there are any unprocessed TS packets ornot (Step so 
SI 02). If there are no any unprocessed TS packets, 
the scrambling process ends. 

(3) If there are unprocessed TS packets, the TS 
packet counting unit 810 acquires one unprocessed 
TS packet to pass it to the scrambling unit 812, and 3B 
counts the TS packet cumulative number to pass it 
to the auxiliary information interpretation unit 813 
(Step SI 03). 

(4) The .auxiliary infonnation interpretation unit 813 
extracts the scrambling key corresponding to the TS ^ 
packet now being processed from the auxiliary infor- 
mation stored in the auxiliary information holding unit 
811, based on the TS packet cumulative number 
passed from the TS packet counting unit 81 0 (Step 
SI 04), ^5 

(5) The scrambling unit 81 2 scrambles one TS pack- 
et passed from the TS packet counting unit 81 0 using 
the scrambling key passed from the auxiliary infor- 
mation interpretation unit 813 and passes It to the 
multiplexing unit 804. Then, the procedure returns so 
upward to process the successive TS packet(Step 
S105). 

(Operations of Reception Apparatus) 

55 

[0273] FIG. 34 shows a procedure in the reception and 
storage processes by means of the reception apparatus 
900 and the security module 1 000 according to the fourth 



embodiment of the invention. 

[0274] Following describes the outline of the prooess- 
: es with reference to FIG. 34. ■ . . ■ 

(1 ) The TS separation un it 901 receives a-TS broad- 
cast by the multiplexing unit 804. Then, the TS Sep- 
aration unit 901 separates a normal reproduction 
ECM and scrambled content (Step S1 1 1). 

(2) The HDD 202 stores the nonmal reproduction 
ECM and the scrambled content separated by the 
TS separation unit 901 (Step S1 12). 

(3) The ECWl interpretation unit 1001 extracts the 
auxiliary information from the normal reproduction 
ECM (Step S113). 

(4) The scrambling key list generation unit 903 gen- 
erates a scrambling key list, based on the auxiliary 
infonnation extracted by the ECM interpretation unit 
1001 (Step S1 14). 

(5) The scrambling key list holding unit 904 holds the 
scrambling key list generated by the scrambling key 
list generation unit 903 (Step Si 15). 

[0275] Note that, the normal reproduction ECM and 
the scrambled content may be separated not at this stage 
but later (e.g., before using them). 
[0276] FIG. 35 shows a procedure in the reproduction 
process after the reception and storage processes by 
means of the reception apparatus 900 and the security 
module 1 000 according to the fourth embodiment of the 
invention. Note that the same numerals are assigned to 
the step where the same processes as in FIG. 12 are 
conducted, and explanation for them has been omitted. 
[0277] Following describes the outline of the reproduc- 
tion process, with reference to FIG. 36. 

(1) The descrambling process unit 905 descrambles 
the scrambled content stored in the HDD 902 based 
on the scrambling key list held by the scrambling key 
list holding unit 904 and passes the descrambled 
content to the reproduction unit 205 (Step S1 21). 

(2) Same as the step (4) in FIG. 12 (Step S34) 

[0278] FIG. 36 shows a procedure in the descrambling 
process by means of the descrambling process unit 905 
In detail. 

[0279] Following describes the outline of the detailed 
procedure in the descrambling process, with reference 
to RG. 36. 

(1) The TS packet extraction unit 910 resets the TS 
packet index into zero when other content starts to 
be processed (Step SI 31). 

(2) The TS packet extraction u nit 9 1 0 judges whether 
there are unprocessed TS packets or not (Step 
SI 32). If there are not any unprocessed TS packet, 
the descrambling process ends. 

(3) if there are unprocessed TS packets, the TS 
packet extraction unit 91 0 extracts one unprocessed 
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TS packet to pass it to the descrambiing unit 911, 
. Also, the TS packet extraction unit .91 0 counts, the . 
TS packet index to pass K to this scmnnbling key list 
interpretation unit 912 (Step S133). 

(4) The scrambling key list interpretation unit 912 
extracts -the scrambling key corresponding to the TS 
packet index passed from the TS pacl<et extraction 
unit 910, from the scrambling key list held by the 
scrannbling key list holding unit 904, and passes the 
extracted key to the descrambiing unit 91 1 (Step 
S134). 

(5) The descrambiing unit 91 1 descrannbles one TS 
packet passed from the TS packet extraction unit 
910 using the scrambling key extracted by the 
scrambling key iist interpretation unrt 91 2 and passes 
the descrambled TS packet to the reproduction unit 
205. Then, the procedure returns upward to process 
the successive TS packet (Step SI 35). 

[0280] In the fourth embodiment, in the case that a 
user has not made a contract to receive the content be- 
fore receiving the content, the generated scrambling key 
list may be encoded and recorded, and then after making 
the contract the iist may be decoded so as to be used. 
Alternatively, instead of generating the scrambling key 
list, all norniai reproduction ECMs including auxiliary in- 
formation may be stored when receiving the content, and 
then, after making the contract, the ECM interpretation 
unit 1 001 may extract each piece of auxiliary information 
from all normal reproduction ECMs to generate the 
scrambling key list. 

[0281 ] As described above, according to the fourth em- 
bodiment of the invention, various partbular reproduction 
processes can be realized by extracting a scrambling key 
corresponding to any one of TS packets from the scram- 
bling key list generated based on the auxiliary inf onmation 
when/after storing the scrambled content or the like. 
[0282] Note here that the auxiliary infomiation may be 
added to a storage ECM. 

Embodiment 5 

<Summary> 

[0283] A system for providing a storage service ac- 
cording to the fifth embodinr^ent of the invention consists 
of a broadcast apparatus, a reception apparatus, and a 
security module. 

[0284] Unlike the first embodiment, the broadcast ap- 
paratus according to the fifth embodiment does not gen- 
erate the scrambling key list. The broadcast apparatus 
in this embodiment broadcasts scrambled content to- 
gether with norma! reproduction ECMs, 
[0285] The security module, which is set and Integrat- 
ed with the reception apparatus in a predetermined po- 
sition, receives the normal reproduction ECM and the 
scrambled content, stores the scrambled content while 
generating a scrambling key list based on the normal 



reproduction ECM, and sequentially desorambles the 
scrambled content using the stored scrambling icey list. 

<Overall-Construction> 

[0286) FIG. 37 shows the construction of a system for 
providing a storage service according to the fifth embod- 
iment of the invention. 

[0287] The system shown in F)G. 37 is made up of a 
10 broadcast apparatus 1 1 00, a reception apparatus 1 200, 
and a security module 1 300. 

[0288] The security module 1 300 Is a portable and in- 
telligent recording mediurn such as an IC card. The se- 
curity module 1300 is set in a predetemiined position of 
iS the reception apparatus 1 200 and used together with the 
reception apparatus 1200. 

[0289] N ote that construction elements which have the 
same functions as those in the first embodiment have 
been given the same reference numerals and their ex- 
20 planation has been omitted. 

{Construction of Broadcast Apparatus) 

[0290] The broadcast apparatus 1 1 00 shown in FIG. 

25 37 is made up of a TS packetizing unit 1 01 , a scrambling 
process unit 1 101 , an ECM generation unit 1 1 02, a mul- 
tiplexing unit 1 1 03, a content acquisition unit 106, and a 
scrambling key acquisition unit 107. 
[0291] The scrambling process unit 1101 scrambles 

30 the content converted into TS packets by the TS pack- 
etizing unit 101, based on the scrambling key acquired 
by the scrambling key acquisition unit 1 07. Note that ex- 
planation of the scrambling process by the scrambling 
process unit 1 101 has been omitted, because the scram- 

35 bling process is conducted in the same manner as in the 
current BS digital broadcasting system. 
[0292] The ECM generation unit 1 102 generates nor- 
mal reproduction ECMs including scrambling keys ac- 
quired by the scrambling key acquisition unit 107. 

40 [0293] The multiplexing unit 1 1 03 associates/attaches 
the generated normal reproduction ECMs with/to the 
scrambled content to produce a TS and broadcasts the 
TS. 

45 (Constructions of Reception Apparatus and Security 

Module) 

[0294] The reception apparatus shown in FIG. 37 is 
made up of a TS separation unit 1201 . a key changing 

50 judgement unit 1202, a key update judgement unit 1 203, 
an HDD 1204, a scrambling key list generation unit 1205, 
a scrambling key list holding unit 1206, a descrambiing 
process unit 1207. and a reproduction unit 205. 
[0295] The security module shown in FIG. 37 is made 

B5 up of an ECM interpretation unit 1301 . 

[0296] The TS separation unit 1201 receives a TS 
broadcast by the multiplexing unit 1 1 03, and separates 
normal reproduction ECMs and scrambled content. 
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[0297] Here, scrambling keys are classified into even 
number keys and odd nunnber keys, 
[0298] FIG. 38 Is a schematic diagram showing-chang- 
es in the scrambling keys and timing for updating nomnal 
reproduction ECMs. 

[0299] As shown in FIG, 38, one nomriai reproduction 
ECM transmits, an even number key and an odd number 
key. When updating the normal reproduction ECM, either 
odd number key or even number key, which is not being 
used, is updated. Therefore, changes in the scrambling 
keys can be detected by the timing of changes between 
odd number keys and even number keys. 
[0300] FIG. 39 Is a schematic diagram showing chang- 
es between an even number key and an odd number 
key, and timing for updating nonnal reproduction ECMs. 
The scrambling control flag (note here that this temi 
equals "transport scrambling control" prescribed in the 
MPEG-2 standard) shown in FIG. 39 is described in the 
TS packet header, which shows the state of the scram- 
bling of the corresponding TS packet as follows. That is. 
in the case that the flag value is "00", scrambling Is not 
performed, in the case of the flag value is "10", scrambling 
is performed using an even number key, and in the case 
that the flag value Is "11", scrambling is perfomned using 
an odd number key. 

[0301] As shown in FIG. 39, timing for changes be- 
tween even number keys and odd number keys can be 
detected by change in the flag value of the scrambling 
control flag (® and O) in FIG. 39). The timingfor updating 
of normal reproduction ECMs can be detected by the 
version number of the normal reproduction ECMs (® in 
FIG. 39). 

[0302] The key changing judgement unit 1202 counts 
the TS packet index indicating the ordinal position of the 
TS packet received by the TS separation unit 1 201 . The 
key changing judgement unit 1202 also checks the 
scrambling control flag in the TS packet header to judge 
whetherthe scrambling is performed by an even number 
key or an odd number key so as to detect the timing for 
changing in scrambling keys and the timing for ending of 
the storage. 

[0303] The key update judgement unit 1 203, firstly, has 
the HDD 1204 store the normal reproduction ECM sep- 
arated by the TS separation unit 1201 therein. Each time 
a normal reproduction ECM is newly separated, the key 
update judgement unit 1203 judges whetherthe new nor- 
mal reprouuCtion ECM is the same as the stored normal 
reproduction ECM. In the case that they are notthe same 
with each other, the key update judgement unit 1203 has 
the HDD 1204 overwrite the normal reproduction ECM 
stored in the HDD 1 204 with the new nomnal reproduction 
. ECM. 

[0304] The HDD 1204 is a recording medium such as 
a hard disk drive. The HDD 1204 stores the scrambled 
content separated by the TS separation unit 1201 and 
the nonnal reproduction ECM passed by the key update 
judgement unit 1203. 

[0305] The ECM interpretation unit 1 301 , at the timing 



for changing scrambling keys detected by the key chang-' 
ing Judgement unit"! 202, extracts the scrambling key that 
has been used until now and the scrambling key that will-, 
be used from now on, from the normal reproduction ECM • 
5 stored in the HDD 1 204, based on the judgement -by the 
key changing judgement unit 1202, and passes the 
. scrambling keys to the scrambling key list generation unit 
1205. 

[0306] The scrambling key list generation unit 1205 
10 generates a scrambling key list, based on the TS packet 
index passed from the key changing judgement unit 1 202 
and the scrambling keys passed from the ECM interpre- 
tation unit 1301. 

[0307] Following describes the processes for monitor- 
15 ing changes in scrambling keys and for generating the 
scrambling key list in detail. 

[0308] FIG. 40 shows a transition of the scrambling 
key list generated. 

[0309] As shown in FIG. 40, the scrambling key list is 
20 not updated at the timing of updating a normal rejaroduc- 

tion ECM (<D in FIG. 39), but underlined infonnation 

shown in this figure is added thereto at the timing of 

changes between odd number keys and even number 

keys (® and (D in FIG. 39). 
25 [0310] The scrambling key list holding unit 1206 holds 

the scrambling key list generated by the scrambling key 

list generation unit 1205. 

[031 1 ] The descrambling process unit 1 207 descram- 
bles the scrambled content stored in the HDD 1204, 

30 based on the scrambling key list held by the scrambling 
key list holding unit 1206, and passes the descrambled 
content to the reproduction unit 205. 
[0312] FIG. 41 shows the detailed construction of the 
descrambling unit 1207. 

35 [0313] The descrambling process unit 1207 shown in 
FIG. 41 is made up of aTS packet extraction unit 1210, 
a descrambling unit 121 1 , and a scrambling key list in- 
terpretation unit 121. 

[031 4] The TS packet extraction unit 1 21 0 extracts the 

40 scrambled contentstored in the HDD 1204 one TS packet 
at a time, and passes the extracted content to the de- 
scrambling unit 1 211 . TheTS packet extraction unit 1210 
also counts the TS packet index indicating the ordinal 
position of the extracted TS packet counted from the be- 

^5 ginning of the content, and passes the TS packet index 
to the scrambling key list interpretation unit 1212. The 
TS packet extraction unit 1 21 0 resets theTS packetindex 
into zero when other content starts to be processed. 
[0315] The scrambling key list interpretation unit 1212 

so extracts the scrambling key corresponding to the TS 
packet index passed from the TS packet extraction unit 
1210, from the scrambling key list held by the scrambling 
key list holding unit 1 204, and passes the extracted key 
to the descrambling unit 121 1. 

55 [0316] The descrambling unit 1211 descrambles one 
TS packet passed from the TS packet extraction unit 
1210 using the scrambling key extracted by the scram- 
bling key list interpretation unit 121 2, and passes the de- 
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scrambled TS packet to the reproduction unit 205. The 
descrambling unlt ;r2fT- repeats this process until all TS 
packets have been processed. 

<Operations> 

(Operations of Broadcast Apparatus) 

[031 7] FIG. 42 shows a procedure in the broadcasting 
process by means of the broadcast apparatus 1100 ac- 
cordingto the fifth ennbodimentof the invention. Note that 
the same numerals are assigned to the step where the 
same processes as in FIG. 9 are conducted, and expla- 
nation for them has been omitted. 

[0318] Following describes the outiine of the proce- is 
dure in the broadcast process, with reference to FIG. 42. 

(1 ) Same as the step (1) in FIG. 9 (Step SI) 

(2) Same as the step (2) in FIG. 9 (Step S2) 

(3) Same as the step (3) in FIG. 9 (Step S3) 20 

(4) The scrambling process unit 1 1 01 scrambles the 
content converted into TS packets by the TS pack- 
etizing unit 101. based on the scrambling key ac- 
quired by the scrambling key acquisition unit 107 
(Step 8141). 

(5) The ECM generation unit 1 1 02 generates a nor- 
mal reproduction ECM including the scrambling key 
acquired by the scrambling key acquisition unit 107 

(Step SI 42). 

(6) The multiplexing unit 1103 associates/attaches 30 
the generated normal reproduction ECM with/to the 
scrambled content to produce aTS and broadcasts 
the TS (Step S143). 

(Operations of Reception Apparatus) ^ 

[031 9] FIG. 43 shows a procedure in the reception and 
storage processes by means of the reception apparatus 
1200 and the security module 1300 according to the 
fourth embodiment of the Invention. ^ 
[0320] Following describes the outline of the proce- 
dure in the reception and storage processes, with refer- 
ence to FIG. 43. 

(1 ) The TS separation unit 1 201 receives the first TS 45 
packet broadcast by the multiplexing unit 1 1 03, and 
separates a nomnal reproduction ECM and scram- 
bled content (Step SI 51). 

(2) The key update judgement unit 1 203 has the HDD 

1 204 store the normal reproduction ECM of the first 5o 
TS packet separated by the TS separation unit 1 201 
therein (Step S152). 

(3) The key changing judgement unit 1202 judges 
whether or notto complete the reception and storage 

processes (Step SI 53). 

(4) If the reception and storage processes should 
not be completed, the TS separation unit 121 re- 
ceives the following one TS packet broadcast by the 



multiplexing unit 1 103, and separates a normal re- 
production ECM and scrambled content (Step . 
S154), 

(5) The HDD 1204 stores the scrambled content sep- 
arated by the TS separation unit 1201 (Step S1S5). 

(6) - The key changing judgement unit 1202 counts 
the TS packet index Indicating the ordinal position 
of the TS packet received by the TS separation unit 
1201. The key changing judgement unit 1202 also 
checks the scrambling control flag in the TS packet 
header to judge whether the scrambling is performed 
by an even number key or an odd number key (Step 
S156). 

(7) The key changing judgement unit 1202 judges 
whether it is the timing for changing scrambling keys 
ornot (Step SI 57). 

(8) If it is the timing for changing scrambling keys, 
the key changing judgement unit 1202 passes the 
counted TS packet index to the scrambling key list 
generation unit 1205 (Step SI 58). 

(9) The ECM interpretation unit 1301 extracts the 
scrambling key extracts the scrambling key that has ' 
been used until now and the scrambling key that will 
be used from now on, from the normal reproduction 
ECM stored in the HDD 1204, based on the Judge- 
ment by the key changing judgement unit 1202, and 
passes the scrambling keys to the scrambling key 
list generation unit 1205 (Step S1 59). 

(10) The scrambling key list generation unit 1205 
updates the scrambling key list, based on the TS 
packet index passed from the key changing judge- 
ment unit 1 202 and the scrambling keys passed from 
the ECM interpretation unit 1301 (Step SI 510). 

(11) The key update judgement unit 1203 judges 
whether the nonnal reproduction ECM separated by 
theTS separation unit 1 202 is the same as the stored 
nonnal reproduction ECM (Step S151 1 ). If they are 
the same with each other, the procedure returns up- 
ward (to Step SI 53) to process the successive TS 
packet (Step SI 51 2). 

(1 2) If they are not the same with each other, the key 
update judgement unit 1203 has the HDD 1204 over- 
write the nonnal storage ECM stored therein with the 
new normal reproduction ECM. Then, the procedure 
returns upward (to Step SI 53) to process the suc- 
cessive TS packet (Step S1512) 

(13) If the reception and storage processes should 
be completed, the key changing judgement unit 1 202 
passes the counted TS packet index to the scram- 
bling key list generation unit 1205 (Step S1513). 

(14) The scrambling key list generation unit 1205 
updates the scrambling key list, based on the TS 
packet index passed from the key changing judge- 
ment unit 1202 to complete the scrambling key list 
(Step SI 51 4). 

(15) The scrambling key list holding unit 1206 holds 
the scrambling key list generated by the scrambling 
key list generation unit 1205 (Step SI 515). 
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[0321 ] In the case that the reception and borage proc- 
esses are. cDmpleted without any changes In scrambling 
keys, the ECM interpretation unit .1301 extracts the 
scrambling, key that has been used until now from the 
norma! reproduction ECM stored in the HDD 1204, based 
on the judgement by the key changing judgement unit 
1202, and passes the extracted key to the scrambling 
key list generation unit 1205. Then, the scrambling key 
list generation unit 1205 updates the scrambling key list, 
based on the TS packet index passed from the key 
changing judgement unit 1 202 and the scrambling key 
passed from the ECM interpretation unit 1301 to com- 
plete the scrambling key list. 

[0322] In addition, instead of separating normal repro- 
duction ECM and scrambled content from each other 
when receiving them, but they may be separated before 
using to generate the scrambling key list. 
[0323] FIG, 44 shows a procedure In the reproduction 
process after the reception and storage processes by 
means of the reception apparatus 1200 and the security 
module 1300 according to the fifth embodiment of the 
invention. Note that the same numerals are assigned to 
the step where the same processes as in FIG. 12 are 
conducted, and explanation for them has been omitted. 
[0324] Following describes the outline of the proce- 
dure in the reproduction process, with reference to FIG. 
44. 

(1) The descrambling process unit 1205 descram- 
bles the scrambled content stored in the HDD 1204, 
based on the scrambling key list held by the scram- 
bling key list holding unit 1206, and passes the de- 
scrambled contentto the reproduction unit 205 (Step 
S161). 

(2) Same as the step (4) in FIG. 12 (Step S34) 

[0325] FIG, 45 shows a procedure in the descrambling 
process by means of the descrambling process unit 1207 
in detail. 

[0326] Following describes the outline of the detailed 
procedure in the descrambling process, with reference 
to FIG. 45. 

(1 ) The TS packet extraction unit 1210 resets the TS 
packet index into zero when other content starts to 
be processed (Step SI 71). 

(2) The TS packet extraction unit 1 21 0 judges wheth- 
er there are unprocessed TS packets or not (Step 
SI 72). If there are not any unprocessed TS packet, 
the descrambling process ends. 

(3) If there are unprocessed TS packets, the TS 
packet extraction unit 1210 extracts one unproc- 
essed TS packet to pass it to the descrambling unit 
1211. Also, the TS packet extraction unit 1210 
counts the TS packet index to pass it to the scram- 
bling key list interpretation unit 1212 (Step S173). 

(4) The scrambling key list interpretation unit 1212 
extracts the scrambling key corresponding to the TS 



pacl<et index passed from the TS packet extraction 
unit . 1210, from the scrambiing key list held by the 
scrambling key list holding unit 1 204 and passes the 
. extracted" key to the descrambling unit 1211 (Step 

5 SI 74). 

(5) The descrambling unit 121 1 descrambles one TS 
packet passed from the TS packet extraction unit 
1210 using the scrambling key extracted by the 
scrambling key list interpretation unit 1 21 2 and pass- 

'0 es the descrambled TS packet to the reproduction 
unit 205. Then, the procedure returns upward to 
process the successive TS packet (Step S175). 

[0327] In the fifth embodiment, in the case that a user 
^5 has not made a contract to receive the content before 
receiving the content, the generated scrambling key list 
maybe encoded and recorded, and after making the con- 
tract the list can be decoded so as to be used. Alterna- 
tively, instead of generating the scrambling key list, all 
20 normal reproduction ECMs may be stored when receiv- 
ing the content, and then, after making the contract, the 
ECM Interpretation unit 1 001 may generate the scram- 
bling key list from all the normal reproduction ECMs. 
[0328] As described above, according to the fifth em- 
25 bodiment of the invention, various particular reproduction 
processes can be realized by extracting a scrambling key 
conresponding to any one of TS packets from the scram- 
bling key list generated when/after storing scrambled 
content or the like. 
■3o [0329] Further, in order to improve the speed of the 
particular reproduction processes realized by selectively 
reproducing 1 pictures only, the I picture as a target may 
be extracted based on an 1 picture list, where the I picture 
list is generated in the same manner for generating the 
35 scrambling key list in the above-described embodiments. 
[0330] The I picture list is represented by an I picture 
list descriptor, for example. 

[0331] FIG. 46 shows one example of the data struc- 
ture of an I picture list descriptor. 
40 [0332] The i picture list descriptor shown in FIG. 46 
includes an I picture identifier (Iplcjd) for identifying 1 
pictures, the number of TS packets counted from the be- 
ginning of the file which indicates the position of the first 
packet of the i picture (firstjDacket_position), and the 
45 number of TS packets counted form the beginning of the 
file which indicates the position of the last packet of the 
I picture (last_packet_posltlon). In the list, the i picture 
identifiers (Ipicjd), the number of TS packets (first_ 
paoket_position), and the number of TS packets (last_ 
50 packet^posltion) are described as much as the number 
of I pictures, 

(Modifications) 

55 [0333] In some of the above-described embodiments, 
the scrambling key list is delivered by the same route as 
that for the scrambled content However, the scrambling 
key list may be delivered by another route, for example, 
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by recording the list onto recording media such as a CD- 
ROM and delivering the recording media, or by means 
of another communication method such as the Internet 
and telephone. 

[0334] In some of the above-described embodiments, 
the TS paclcet. corresponding to the scrambling key is 
specified based on the number of TS packets. However, 
the TS packet may be specified by another method. For 
example, this may be based on the cumulative amount 
of data in the TS packet, a relative reproduction time from 
the beginning of the content Altematively, the TS packet 
may be specified by an identifier for the scrambling key, 
which is embedded for each TS packet in advance. 
[0335] In each of the above-described embodiments, 
the scrambling keys are acquired from the database in 
the broadcaist station. However, the scrambling keys may 
be generated before scrambling process. 
[0336] Each of the above-described embodiments 
does not especially limit the timing for generating the 
scrambling key list For Instance, at the side of the broad- 
cast apparatus, the list maybe generated before scram- 
bling, at the time of scrambling, or after scrambling. At 
the side of the reception apparatus, the list may be gen- 
erated at any time before using the list in the descram- 
bling process. 

[0337] Besides, computer programs to have a compu- 
ter execute the procedure of the above-described em- 
bodiments may be recorded on computer-readable re- 
cording media or may be directly transferred on the net- 
work to be distributed and sold. 

[0338] These recording media can be, for example, 
removable recording media such as a floppy disk, a com- 
pact disk, a magnet optical disk, a DVD disk, and a mem- 
ory card and fixed recording media such as hard disk, 
semiconductor memory. 

[0339] Although the present invention has been fully 
described by way of examples with reference to the ac- 
companying drawings, it is to be noted that various 
changes and modifications will be apparent to those 
skilled in the art. Therefore, unless such changes and 
modifications depart from the scope of the present inven- 
tion, they should be construed as being included therein. 



Claims 

1 . A reception apparatus (200) for receiving and repro- 
ducing scrambled content, comprising: 

reception means (201) for receiving the scram- 
bled content, wherein the scrambled content is 
scrambled so that a predetemiined unit of 
scrambled content, which is a portion of the 
scrambled content, is descrambled using a de- 
scrambling key corresponding to the predeter- 
mined unit of scrambled content 
storage means (202) for storing the received 
scrambled content; 



descramble processing means (204) -for (a) ex- 
tracting the predetermined unit of scrarnbJed 
content from the stored scrambled content, -and . 
(b) olptaining a predetermined unit„of :Content 
5 from the extracted predetermined unitof scram- 

bled content; and 

reproduction means (205) for reproducing the 
predetermined unit of content in the obtained 
order,. characterised In that: 

10 

the reception means (201) are arranged to 
receive at least one piece of storage infor- 
mation in which a list including all descram- 
bling keys to be used for descrambiing the 

75 scrambled content is embedded, 

the storage means (202) are an*anged to 
store the received storage information, 
the reception apparatus (200) further com- 
prises list extraction means (301) for ex- 

20 tracting the list from the stored storage in- 

fonmatlon, and 

the descramble processing means (204) 
are arranged to extract a descrambiing key 
corresponding to the predetermined unit of 
25 scrambled content from the extracted iist, 

and obtain the predetermined unit of con- 
tent by descrambiing the extracted prede- 
temiined unit of scrambled content using 
the extracted descrambiing key. 

30 

2. The reception apparatus of Claim 1 , wherein 

the reception means (201 ) receives one piece of 
storage information In which the list is embedded, 
the storage means (202) stores the received scram- 
35 bled content and the one piece of storage informa- 
tion, and 

the list extraction means (301) extracts the list from 
the stored one piece of storage information. 

40 3. The reception apparatus of Claim 1 , wherein the re- 
ception means (201) receives a plurality of pieces of 
storage information in each piece of which a divided 
portion of the list is embedded, 
the storage means (202) stores the received scram- 

45 bled content and the plurality of pieces of storage 
infonmation, and 

the list extraction means (301 0 extracts the list from 
the stored plurality of pieces of storage infomiation. 

50 4, The reception apparatus of Claim 1 , wherein the re- 
ception means (201 ) sequentially receives a trans- 
port stream (TS) packet including the predetenmined 
unit of scrambled content, 

the storage means (202) sequentially stores the re- 
55 ceived TS packet, wherein 

the descramble processing means (204) includes: 

scrambled content extraction means for extract- 
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ing the predetermined unit of scrambled content 
. from on of the TS packets stored the. storage : 
means, and counting the. ordinal position of the 
TS packet from the leading TS packet; 
- descrambling key extraction means (21 2) for ex- 
tracting a descrambling key from the list, based 
on the counted . ordinal position; and 
descrambling means (21 1) tor descrambling the 
extracted predetemiined unit of scrambled con- 
tent using the extracted descrambling key. 

5. The reception apparatus of Claim 1 , wherein 

the reception means (201 ) receives at least one stor- 
age Entitlement Control Message (ECM) as the at 
least one piece of storage information, the list being 
embedded in a portion to be encoded in the main 
body of the ECM, 

the storage means (202) stores the received storage 
EC^As, and 

the list extraction means (301) interprets the stored 
storage ECMs to extract the list. 

6. The reception apparatus of Claim 5, wherein 

the reception means (201) receives the storage EC- 
Ms including identifying information for distinguish- 
ing the storage ECMs from another type of ECM. 

7. The reception apparatus of Claim 5, wherein 

the reception means (201) receives the storage EC- 
Ms at a.time. 

8. The reception apparatus of Claim 1 , wherein 

the reception means (201) sequentially receives a 
TS packet including (a) the predetennined unit of 
scrambled content and (b) packet specifying infor- 
mation for specifying an unscrambled TS packet, 
and 

the storage means (202) sequentially stores the re- 
ceived TS packet, wherein 
the descramble processing means (204) includes: 

scrambled content extraction means for extract- 
ing the predetermined unit of scrambled content 
and the packet specifying infomnatlon from one 
of the TS packets stored in the storage means; 
descrambling key extraction means (21 2) for ex- 
tracting a descrambling key from the list, based 
on the extracted packet specifying infonmation; 
and 

descrambling means (211) for descrambling the 
extracted predetermined unit of scrambled con- 
tent using the extracted descrambling key. 

9. The reception apparatus of Claim 8. wherein 

the packetspeclfying infomnation is one of Continuity 
Counter (CO), the number of TS packets, a cumula- 
tive amount of data, a relative reproduction time, and 
a scrambling key identifier, 



the scrambled content extraction means (21 0) ex- 
tracts, as the packet specifying infonmation, one- of 
the Continuity Counter (CC), the number of TS pack- 
ets, the cumulative amount of data, the relative rp- 
s production time, and the scrambling key identifier, 

and 

the descrambling key extraction means (21 2) per- 
forms a predetermined operation to the extracted in- 
fonnation as the packet identifying information to 
TO generate a descrabling key identifier, and extracts a 
descrambling key from the list based on the de- 
scrambling key Identifier. 

10. The reception apparatus of Claim 1 , wherein 
15 the reception means (201) sequentially receives a 
TS packet including (a) the predetemiined unit of 
scrambled content and (b) unscrambled I picture in- 
fomnation, wherein the I picture infomnation indicates 
whether the TS packet corresponding to' the infer- 
no mation consists of a portion of an I picture/an 1 picture 
or not, and 

the storage means (202) sequentially stores the re- 
ceived TS packet, wherein 
the descramble processing means (204) includes: 

25 

scrambled content extraction means (21 0) for, 
when performing particular reproduction proc- 
esses, extracting the predetennined unit of 
scrambled content and I picture information from 
30 one of the TS packets stored in the storage 

means; 

t picture judgement means (204, S52) for judg- 
ing whether the extracted predetenmlned unit of 
scrambled content consists of a portion of an I 

35 picture/an I picture or not, based on the extract- 

ed I picture information; 
descrambling key extraction means (21 2) for ex- 
tracting a descrambling key from the list, only 
when the extracted predetennined unit of 

40 scrambled content consists of a portion of an I 

picture/an I picture; and 
descrambling means (21 1 ) for descrambling the 
extracted predetermined unit of scrambled con- 
tent using the extracted descrambling key. 

45 

11 . The reception apparatus of Claim 1 further managing 
contract information and consisting of a security 
module whose portion does not effectively function 
if a contract has not been made, and other modules. 
50 the reception apparatus further comprising: 

list holding means (203) for holding the list ex- 
tracted by the list extraction means, 

35 wherein the list extraction means (301) and the list 
holding means (203) are provided within the security 
module. 
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A broadcast apparatus (1 00) for scrambling content 
and broadcasting the scrambled content to a recep- 
tion apparatus (200), the broadcast apparatus (100) 
comprising: 

acquisition means (1 06, 107) for acquiring con- 
tent to be scrambled and a plurality of descram- 
bling l<eys; 

scramble processing means (T03) for scram- 
bling a predetermined unit of content out of the 
acquired content so that the predetemnined unit 
of scrambled content is desci^mbled using a de- 
scrambling key different for each predetemnined 
unit or each set of a plurality of predetermined 
units; and 

broadcast means (1 05) is arranged to broadcast 
the scrambled content, characterised In that; 

the broadcast apparatus (100) further compris- 
es: list generation means (102) for generating a 
list of the descrambling keys; and embedding 



means (104) for embedding the list in at least 
one piece of predetermined information to gen- 
erate at least one piece of storage information, 
and 

the broadcast means (1 05) is arranged to broad- 
cast the generated storage infomnation. 

3. The broadcast apparatus of Claim 12, wherein 
the embedding means (104) embeds the list in one 
piece of predetermined information to generate one 
piece of storage Infomnation, and 

the broadcast means (105) broadcasts the generat- 
ed one piece of information and the scrambled con- 
tent. 

4. The broadcast apparatus of claim 12, wherein 

the embedding means embeds a divided portion of 
the list in each of a plurality of pieces of predeter- 
mined information to generate a plurality of pieces 
of storage information, and 

the broadcast means (105) broadcasts the generat- 
ed plurality of pieces of storage information and the 
scrambled content. 

15. The broadcast apparatus of claim 12, wherein 

the embedding means (1 04) embeds the list in a por- 
tion to be encoded in a main body of at least one 
ECM to generate at least one piece of storage infor- 
mation. 



steps: 

a reception step (S21 ) for receiving scrambled • 
content, wherein the scrambled . content is 
scrambled so that a predetermined unit of 
■ scrambled content, which is a portion of the 
scrambled content, is descrambled using a de- 
scrambling key corresponding to the predeter- 
mined unit of scrambled content; 
a storage step (S22) for storing the received 
scrambled content; 

a descramble processing step (S33) for (a) ex- 
tracting the predetermined unit of scrambled 
content from the stored scrambled content, and 
(b) obtaining a predetermined unit of content 
from the extracted predetemnined unit of scram- 
bled content; and 

a reproduction step (S34) for reproducing the 
predetermined unit of content in the obtained 
order, characterised in that: 

the reception step (S21 ) is furtherfor receiv- 
ing at least one piece of storage information 
in which a list including all descrambling 
25 keys to be used for descrambling the scram- 

bled content is embedded, 
the storage step (S22) is further for storing 
the received storage infonnation, 
the computercodef urthercauses said com- . 
30 puter system to perform a list extraction step 

(S31 ) for extracting the list from the stored 
storage information, and 
the descramble processing step (S33) is 
further for extracting a descrambling key 
35 corresponding to the predetermined unit of 

scrambled content from the extracted list, 
and for obtaining the predetemiined unit of 
content by descrambling the extracted pre- 
detemiined unit of scrambled content using 
40 the extracted descrambling key. 

ia. A computer program comprising computer code to, 
when loaded into a computer system and executed, 
cause said computer system to perform thef ollowing 
45 Steps: 

an acquisition step (S1 , S3) for acquiring for ac- 
quiring content to be scrambled and a plurality 
of descrambling keys; 

a scramble processing step (S5) for scrambling 
a predetermined unit of content out of the ac- 
quired content so that the predetemiined unit of 
scrambled content is descrambled using a de- 
scrambling key different for each predetermined 
unit or each set of a plurality of predetermined 
units; and 

a broadcast step (S7) for broadcasting the 
scrambled content, characterised in that: 



16. The broadcast apparatus of Claim 12, wherein 
the broadcast means (105) broadcasts one set of 
the storage information while al! the scrambled con- 
tent corresponding descrambled order. 

17. A computer program comprising computer code to, 
when loaded into a computer system and executed, 
cause said computer system to performthe following 
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the computer code further causes said com- 
puter system to perfonn: a list generation 
■step (S4) for generating a list of the de- 
scrambling keys; and an embedding step 
(S6) for embedding the list in at least one 5 
piece of predeteiritiined information tb gen- 
erate at least one piece of storage informa- 
tion, and 

the broadcast step (S7) Is further for broad- 
casting the generated storage information. io 

19. A recording medium for storing instructions which 
cause at least a portion of a computer system to per- 
fomn the following steps: 

15 

a reception step (S21) for receiving scrambled 
content, wherein the scrambled content is 
• scrambled so that a predetermined unit of 
scrambied content, which is a portion of the 
scrambled content, is descrambled using a de- 20 
scrambling tcey corresponding to the predeter- 
mined unit of scrambled content, 
a storage step (S22) for storing the received 
scrambled content; 

a descramble processing step (S33) for (a) ex- 25 
tracting the predetermined unit of scrambled 
content from the stored scrambled content, and 
(b) obtaining a predetennined unit of content 
from the extracted predetermined unit of scram- 
bled content; and ^o 
a reproduction step (S34) for reproducing the 
predetermined unit of content in the obtained 
order, 

characterised in that: 3S 

the reception step (S21) is further for receiving 
at least one piece of storage information in which 
a list including ail descrambiing l<eys to be used 
for descrambiing the scrambled content is em- 40 
bedded, 

the storage step (S22) is further for storing the 
received storage information, and 
the instructions further cause said computer 
system to perfomi a list extraction step (S31 ) for 45 
extracting the list from the stored storage infor- 
mation. 

20. A recording medium for storing instructions which 

cause at least a portion of a compute r system to per- so 
form the following steps: 

an acquisition step (S1 ,S3) for acquiring content 
to be scrambied and a plurality of descrambiing 

keys; 

a scramble processing step (S5) for scrambling 
a predetermined unit of content out of the ac- 
quired content so that the predetermined unit of 



scrambled content is descrambled using a de- 
scrambling key different tor each predetermined 
unit or each set of a plurality of predetermined 
units; and 

a broadcast step (S7) for broadcasting the 
scrambled content characterised in that: 

the instructions further cause said computer 
system to perfomn: a list generation step 
(S4) for generating a list of the descrambiing 
keys; and an embedding step(S6) for em- 
bedding the list in at least one piece of pre- 
detennined information to generate at least 
one piece of storage information, and 
the broadcast step (S7) is further for broad- 
casting the generated storage infomnation. 

21. A method for receiving and reproducing scrambled 
content, the method comprising the steps of: 

a reception step (S21 ) for receiving the scram- 
bled content, wherein the scrambled content is 
scrambled so that a predetermined unit of 
scrambled content, which is a portion of the 
scrambled content. Is descrambled using a de- 
scrambling key corresponding to the predeter- 
mined unit of scrambied content; 
a storage step (S22) for storing, the received 
scrambled content; 

a descramble processing step (S33) for (a) ex- 
tracting the predetermined unit of scrambled 
content from the stored scrambled content, and 
(b) obtaining a predetermined unit of content 
from the extracted predetennined unit of scram- 
bled content; and 

a reproduction step (S34) for reproducing the 
predetermined unit of content in the obtained 
order, characterised in that 
the reception step (S21 ) is further for receiving 
at least one piece of storage information in which 
a list including all descrambing keys to be used 
for descrambiing the scrambled content is em- 
bedded, 

the storage step (S22) is further for storing the 
received storage infomiation, and 
the method further comprises a list extraction 
step (S31 ) for extracting the list from the stored 

storage information. 

22. A method for scrambling content and broadcasting 
the scrambled content to a reception apparatus 
(200), the method comprising the steps of: 

an acquisition step (S1 ,S3) for acquiring content 
to be scrambied and a plurality of descrambiing 
keys; 

a scramble processing step (S5) for scrambling 
a predetermined unit of content out of the ac- 
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quired content so that the predetennined unit of 
scrambled content is descrambled using a de- 
scrambling key different for each predetemiined 
unit or each set of d plurality of predetermined 
units; and 

a broadcast step (S7) for broadcasting the 
scrambled content, characterised in that: 

the method further comprises: a list gener- 
ation step (S4) tor generating a fist of the 
descrambling keys; and an embedding step 
(S6) for embedding the list in at least one 
piece of predetermined information to gen- 
erate at least one piece of storage infomna- 
tion, and 

the broadcast step (S7) is further for broad- 
casting the generated storage information. 



Patentansp ruche 

1. Empfangsvomchtung (200) zum Empfangen und 
Wiedergeben von verscrambeltem Inhalt, die um- 
fasst: 

eine Empfangseinrichtung (201). die den vers- 
crambelten Inhalt empffingt, wobe! der vers- 
crambelte Inhalt so verscrambelt ist, dass eine 
vorgegebene Einheit von verscrambeltem In- 
halt, die ein Tell des verscrambelten Inhalts ist, 
unter Verwendung eines Entscrambelungs- 
Schlussels entsprechend der vorgegebenen 
Einheit von verscrambeltem Inhalt entscrambeit 
wird, 

eine Speichereinrichtung (202), die den emp- 
fangenen verscrambelten Inhalt speichert; 
eine Entscrambel-Verarbeitungseinrichtung 
(204), die (a) die vorgegebene Einheit von vers- 
crambeltem Inhalt aus dem gespeicherten vers- 
crambeltem Inhalt extrahiert, und (b) eine vor- 
gegebene Einheit von Inhalt aus der extrahier- 
ten vorgegebenen Einheit von verscrambeltem 
Inhalt gewinnt; und 

eine Wiedergabeeinrichtung (205). die die vor- 
gegebene Einheit von Inhalt in dergewonnenen 
Reihenfolge wiedergibt, dadurch gekenn- 
zelchnet, dass: 

die Empfangseinrichtung (201) so einge- 
richtet ist, dass sie wenigstens ein Element 
von Speicherinformationen empfangt, in 

das eine Liste eingebettet ist, die alie zum 
Entscrambein des verscrambelten Inhalts 
zu verwendenden Entscrambelungs- 
Schlussel enthait, 

die Speichereinrichtung (202) so eingerich- 
tet ist, dass sie die empfangenen Speicher- 
informationen speichert, 
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die Empfangsvorrichtung (200) des Weite- 
ren eine Listen-Extrahiereinrichtung (301) 
umfasst, die die Liste aus den gespeicher- 
ten Speicherinformationen extrahiert, und " 
die Entscrambel-Verarbeitungseinrichtung 
■ (204) so eingerichtet ist, dass sie einen . 
Entscrambelungs-Schlussel entsprechend 
der vorgegebenen Einheit von verscram- 
beltem Inhalt, aus der extrahierten Liste ex- 
trahiert, und die vorgegebene Einheit von 
Inhalt gewinnt, indem sie die extrahierte 
vorgegebene Einheit von verscrambeltem 
Inhalt unter Venwendung des extrahierten 
Entscrambelungs-Schliissels gewinnt. 

Empfangsvorrichtung nach Anspruch 1 , wobei 
die Empfangseinrichtung (201) ein Element von 
Speicherinformationen empfangt, in das die Liste 
eingebettet ist, 

die Speichereinrichtung (202) den empfangenen 
verscrambelten inhalt und das eine Element von 
Speicherinfomnationen speichert, und 
die Listen-Extrahiereinrichtung (301) die Liste aus 
dem gespeicherten einen Element von Speicherin- 
formationen extrahiert. 

Empfangsvorrichtung nach Anspruch 1, wobei die 
Empfangseinrichtung (201) eine Vielzahl von Ele- 
menten von Speicherinformationen empfangt, und 
wobei in jedem Element derselben ein separaterTeil 
der Liste eingebettet ist, 

die Speichereinrichtung (202) den empfangenen 
verscrambelten Inhalt und die Vielzahl von Elemen- 
ten von Speicherinfomiationen speichert, und 
die Listen-Extrahiereinrlchtung (301) die Liste aus 
der gespeicherten Vielzahl von Elementen von Spei- 
cherinformationen extrahiert 

Empfangsvorrichtung nach Anspruch 1, wobei die 
Empfangseinrichtung (201 ) sequenziell ein Trans- 
portstrom (TS)-Paketempfangt, das die vorgegebe- 
ne Einheit von verscrambeltem Inhalt enth^lt, 
die Speichereinrichtung (202) sequenziell das emp- 
tangene Transportstrom-Paket speichert. wobei die 
Entscrambel-Verarbeitungseinrichtung (204) ent- 
hait: 

eine Einrichtungzum Extrahieren von verscram- 
beltem Inhalt, die die vorgegebene Einheit von 
verscrambeltem Inhaft aus einem der in der 
Speichereinrichtung gespeicherten Transport- 
strom-Pakete extrahiert und die Ordlnalposition 
des Transportstrom-Paketes von dem vorderen 
Transportstrom-Paket an zahit; 
eine Einrichtung (212) zum Extrahieren eines 
Entscrambelungs-Schlussels, die auf Basis der 
gezahlten Ordinalposition einen Entscrambe- 
lungs-Schlussel aus der Liste extrahiert; und 
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eine Entscrambelungs-Einrichtung (211), die 
, die extrahierte vorgegebene Einhelt von vers- 
crambeltem Inhalt unterVerwendung des extra- 
hierten Entscrambelungs-SchlQssels entscram- 
belt 

Empfangsvorrichtung nach Anspruch 1 , wobei 
die Empfangseinrichtung (201) wenigstens eine 
Speicher-Berechtigungsmitteilung (Entitlement 
Contrail Message - ECM) als das wenigstens eine 
Element von Speicherinformationen empfangt, wo- 
bei die Liste in einen 2U codierenden Abschnitt in 
dem Hauptkorper der ECM eingebettet ist, 
die Speichereinrlchtung (202) die empfangenen 
Speicher-ECM spelchert; und 
die Listen-Extrahiereinriclitung (301) die gespei- 
cherten Speicher-ECM interpretlert, um die Liste zu 
extrahieren. 

Empfangsvorrichtung nach Anspruch 5, wobei 
die Empfangseinrichtung (201) die Speicher-ECM 
empfSngt, die identffizierungsinfomnationen enthal- 
ten, um die Speicher-ECM von ECM eines anderen 
Typs 2U unterscheiden. 

Empfangsvonrichtung nach Anspruch 5, wobei 
die Empfangseinrichtung (201) die Speicher-ECM 
einzeln empfSngt, 

Empfangsvorrichtung nach Anspruch 1 , wobei 
die Empfangseinrichtung (201) sequenziell ein 
Transportstrom-Paket empfSngt, das (a) die vorge- 
gebene Einheitvon verscrambeltem inhatt, und (b) 
Paket-Speziflzierungsinfomiationen enthSit, die ein 
nicht-verscrambeltes Transportstrom-Paket spezifi- 
zieren, und 

die Speichereinrichtung (202) sequenziell das emp- 
fangene Transportstrom-Paket spelchert, wobei die 
Entscrambel-Verarbeitungseinrichtung (204) ent- 
hdlt: 

eine Einrichtung zum Extrahieren von verscram- 
beltem Inhalt, die die vorgegebene Einheit von 
verscrambeltem Inhalt und die Paket-Spezifizie- 
rungsinformatlonen aus einem der in der Spei- 
chereinrichtung gespeicherten Transportstrom- 
Pakete extrahlert; 

eine Einrichtung (212) zum Extrahieren eines 
Entscrambelungs-Schlussels, die einen Ents- 
crambelungs-Schltissel auf Basis der extrahier- 
ten Paket-Spezifizierungsinformationen aus der 
Liste extrahiert; und 

eine Entscrambelungs-Einrichtung (211), die 
die extrahierte vorgegebene Einheit von vers- 
crambeltem Inhalt unterVerwendung des esctra- 
hierten Entscrambelungs-Schlussels entscram- 
belt. 



9. Empfangsvorrichtung nach Anspruch 8, wobei 

die Paket-Spezifizierungslnformationen ein Zahler 
(Continuity Counter - CC) ist, die Anzahl von Trans- 
portstrom-Paket en, eine kumulative Menge an Da- 

5 ten, eine relative Wledergabezeit oder eine Vers- 

crambelungs-Schlussel-Kennung ist, 
die Einriciitung (210) zum Extrahieren von vers- 
crambeltem Inhatt ais die Paket-Spezifizierungsin- 
formationen den Zahler (CC), die Anzahl von Trans- 

10 portstrom-Paketen, die kumulattve Menge an Daten, 
die relative Wiedergabezeit oder die Verscrambe- 
lungs-Schlussel-Kennung extrahiert, und 
die Einrichtung (212) zum Extrahieren eines Ents- 
crambelungs-Schlussels eine vorgegebene Opera- 

is tion an den extrahierten Informationen als den Pa- 
ket-ldentifizierungsinformationen durchfuhrt, um ei- 
ne Entscrambelungs-Schttissel-Kennung zu erzeu- 
gen, und einen Entscrambetungs-Schlussel auf Ba- 
sis der Entscrambelungs-SchlQssei-Kennung aus 

20 der Liste extrahiert 

10. Empfangsvonichtung nach Anspruch 1, wobei 

die Empfangseinrichtung (201) sequenziell ein 
Transportstrom-Paket empf&ngt, das (a) die vorge- 

25 gebene Einheit von verscrambeltem Inhalt und (b) 
nicht-verscrambelte I-BUd-lnfonnationen enthSlt, 
wobei die l-Bitd-lnfoimationen anzeigen, ob das den 
Informationen entsprechende Transportstrom-Pa- 
ket aus einem Teii eines l-B1ides/einem I-Blld besteht 

30 Oder nicht, und 

die Speichereinrichtung (202) sequenziell das emp- 
fangene Transportstrom-Paket speichert, wobei die 
Entscrambel-Verarbeitungseinrichtung (204) ent- 
h^lt: 

35 

eine Einrichtung (210) zum Extrahieren von 
. verscrambeltem Inhalt, die, wenn sie bestimmte 
Wiedergabeprozesse durchfUhrt, die vorgege- 
bene Einhelt von verscrambeltem Inhalt und I- 

40 Bild-lnformationen aus einem der in der Spei- 

chereinrichtung gespeicherten Transportstron)- 
Pakete extrahiert; 

eine }-Bild-Festste!leinrichtung (204, S52), die 
auf Basis der extrahierten 1- Bild-lnformationen 

45 feststellt, ob die extrahierte vorgegebene Ein- 

heit von verscrambeltem Inhalt aus einem Tell 
eines l-Blides/elnem l-Bild besteht oder nicht; 
eine Einrichtung (212) zum Extrahieren eines 
Entscrambelungs-Schlussels, die einen Ents- 

so crambelungs-SchlGssel aus der Liste nur dann 

extrahiert, wenn die extrahierte vorgegebene 
Einheit von verscrambeltem Inhalt aus einem 
Tail eines 1-Bildes/einem l-Bild besteht; und 
erne Entscrambelungs-Einrichtung (211), die 

ss die extrahierte vorgegebene Einheit von vers- 

crambeltem Inhalt unter Verwendung des extra- 
hierten Entscrambelungs-SchlQssels entscram- 
belt. 
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11. Empfangsvorrichtung nach.Anspruch 1 , die des Wei- 
■ teren Vertrags-lnformationen verwaltet und aus ei- 
neri) Stcherheltsmodul, dessen Teil nicht effektiv 
furiktioniert, wenn kein Vertrag geschlossen worden 
ist, sowie aus anderen -Modulen besteht, Wobei die s 
Empfangsvorrichtung des Weiteren umfasst 

eine Listen-Speichereinrichtung (203). die die 
dutch die Listen-Extrahiereinrichtung extrahier- 
te Liste speichert, 

wobei die Listen-Extrahiereinrichtung (301) und die 
Listen-Speichereinrichtung (203) in dem Sicher- 
heltsmodui vorhanden sind. 



14. Rundsendevorrichtung nach Anspruch 12, wobei .. 
die Einbetteinrichtung einen separaten Teil der.Liste 
in jedes einerVlelzahlvon Elennenten vorgegebener. 

■ ' 'Infomiationen einbettet, urn eine Vielzahl yon Ele- 
' menten von Speicherinfomnationen zu erzeugen, 
und 

die Rundsendeemrichtung (105) die eizeugte Viel- 
zahi von Elementen von Speicherinfonnationen und 
den verscrambelten Inhalt rundsendet. 



12- Rundsendevorrichtung (100), die Inhalt verscram- 
bett und den verscrambelten Inhaft zu einer Emp- 
fangsvorrichtung (200) rundsendet. wobei die Rund- 
sendevorrichtung (100) umfasst: 

eine Erfassungseinrichtung (106, 107), die zu 
verscrambelnden Inhalt und eine Vielzahi von 
Entscrambelungs-SchlQsseIn erfasst; 
eine Verscrambelungs-Verarbertungseinrich- 
tung (103), die eine vorgegebene Einhett von 25 
Inhalt aus dem erfassten Inhalt verscrambett, so 
dass die vorgegebene Einheit von verscrambel- 
tem inhalt unter Verwendung eines Entscram- 
belungs-SchlDssels entscrambelt wird, der fur 
]ede vorgegebene Einheit oder jede Gruppe ei- 30 
ner Vielzahl vorgegebener Einheiten verschie- 
den ist; und 

eine Rundsendeeinrichtung (105), die so einge- 
richtet ist, dass sie den verscrambelten Inhalt 
rundsendet, 

dadurch gekennzeichnet, dass 
die Rundsendevon-ichtung (1 00) des Weiteren um- 
fasst: 

40 

eine Listen-ErzeugungseinriclTtung (102), die 
eine Liste der Entscrambelungs-SchlQssel er- 
zeugt, und eine Einbetteinrichtung (1 04), die die 
Liste in wenigstens ein Element vorgegebener 
Infonnatlonen einbettet, urn wenigstens eln Ele- **5 
ment von Speicherinformationen zu erzeugen, 
und 

die Rundsendeeinrichtung (1 05) so eingerichtet 
ist, dass sie die erzeugten Speicherinfomnatio- 
nen rundsendet 

13. Rundsendevorrichtung nach Anspruch 12, wobei 
die Einbetteinrichtung (104) die Liste in ein Element 
vorgegebener Infomnationen einbettet, um ein Ele- 
ment von Speicherinformationen zu erzeugen, und 55 
die Rundsendeeinrichtung (105) das erzeugte eine 
Element von informationen und den verscrambelten 
Inhalt rundsendet.. 



15. Rundsendevorrichtung nach Anspruch 12, wobei 
die Einbetteinrichtung (104) die Liste In elnem zu 
codierenden Teil in einem Hauptkorper wenigstens 
einer ECM einbettet, um wenigstens ein Element von 

IS Speicherinformationen zu erzeugen. 

16. Rundsendevorrichtung nach Anspruch 12, wobei 
die Rundsendeeinrichtung (106) eine Gruppe der 
Speicherinformationen rundsendet und der gesemte 

20 verscrambelte Inhalt der Entscrambelungs-Relhen- 
folge entspricht. 



17. Computerprogramm, das Computercode umfasst, 
der, wenn er in eln Computersystem geladen und 
ausgefUhrt wlrd. das Compirtersystem veraniasst. 
die folgenden Schrltte durchzufOhren. 
einen Empfangsschritt (S21) zum Empfangen von 
verscrambeltem Inhalt, wobei der verscrambelte In- 
halt so verscrambeltist, dass eine vorgegebene Ein- 
heit von verscrambeltem Inhatt, die ein Teil des vers- 
crambeltem Inhalt ist, unter VenA^endung eines Ents- 
crambelungs-Schlussels entsprechend der vorge- 
gebenen Einheit von verscrambeltem Inhalt ents- 
crambelt wird; 

einen Speicherschritt (822) zum Spelchern des 
empfangenen verscrambelten Inhalts; . 
einen Entscrambel-VerariDeitungsschritt (S33) zum 
(a) Extrahieren der vorgegebener Einheit von vers- 
crambeltem Inhalt aus dem gespeicherten vers- 
crambelten Inhalt, und (b) Gewinnen einer vorgege- 
benen Einheit von Inhalt aus der extrahierten vorge- 
gebenen Einheit von verscrambeltem Inhalt; und 
einen Wiedergabeschritt (834) zum Wiedergeben 
der vorgegebenen Einheit von Inhalt in der gewon- 
nenen Reihenfolge, dadurch gekennzeichnet, 
dass: 

der Empfangsschritt (821) des Weiteren dazu 
dient, wenigstens ein Element von Speicherin- 
fomnationen zu empfangen, in das eine Liste ein- 
gebettet ist, die alle zum EntscrambeIn des vers- 
crambelten Inhaltszu verwendenden Entscram- 
belungs-SchlOssel enthSIt, 
der Speicherschritt (S22) des Weiteren dazu 
dient, die empfangenen Speicherinfomnationen 
zu speichern, 

der Computercode das Computersystem des 
Weiteren veranlasst, einen Listen-Extrahier- 
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schritt (S31 ) 2um Extrahieren der Liste aus den 
gespeicherten Spelcherlnformationen durchzu- 
. fQhren, und . 
der ' Entscrambelungs-Verarbeitungsschritt 
(S33) des Weitere h dazu dient; einen Erttscram- 
belungs-Schiussel entsprechend der vorgege- 
benen Einheit von verscrambeltem Inhatt aus 
der extrahierten Liste zu extrahleren und dazu, 
die vorgegebene Etnheitvon Inhatt durch Ents- 
crambeln der extrahierten vorgegebenen Ein- 
heit von verscrambeltenn In halt unter Verwen- 
dung des extrahierten Entscrambelungs- 
SchlOssels zu gewinnen. 

18. CompiJterprogramm, das Computercode umfasst, 
der, wenn er in ein Compute rsystem getaden und 
ausgefuhrt wird, das Computersystem veraniasst, 
die foigenden Schritte durchzufQhren: 

einen Erfassungsschritt (SI, S3) zum Erfassen 
von zu verscranribelndem Erfassungsinhalt und 
einer Vieizahl von Entscrambelungs-SchlUs- 
. sein; 

einen Verscrambel-Verarbeitungsschritt (S5) 
zum Verscrambeln einer vorgegebenen EInhe'rt 
von In halt aus dem erfassten inhalt, so dass die 
vorgegebene Einheltvon verscrannbeltem Inhalt 
unter Verwendung eines Entscrambeiungs- 
Schlussels entscrambelt wIrd, der fur jede vor- 
gegebene Einheit oder jede Gruppe einer Viei- 
zahl vorgegebener Einheiten verschieden ist; 
und 

einen Rundsendeschrltt (ST) zum Rundsenden 
des verscrambelten Inhaits, dadurch gekenn- 
zelchnet, dass 

der Computercode das Computersystem des 
Weiteren veraniasst, durchzufuhren: 

einen Listen-Erzeugungsschritt (S4) zum 
Erzeugen einer Liste der Verscrambelungs- 
Schlusset; 

und einen Einbettschritt (S6)2um Etnbetten 
der Liste in wentgstens ein Etement vorge- 
gebener Informationenj urn wenigstens ein 
Element von Speicherinformatlonen zu er- 
zeugen, und 

der Rundsendeschrltt (S7) des Weiteren 
zum Rundsenden der erzeugten Speicher- 
infonmationen dient 

19, Aufzeichnungsmedium zum Speichern von Befeh- 
len, die wenigstens einen Abschnitt eines Compu- 
tersystems veraniassen, die foigenden Schritte 
durchzufOhren: 

einen Empfangsschrltt (S21) zum Empfangen 
von verscrambeltem Inhalt, wobei der verscram- 
belte Inhalt so verscrambeltwird. dass eine vor- 
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gegebene Einheit von verscrambettem Inhatt, 
die ein Jeit des verscrambelten Inhaits ist, unter ' 
Venwendung eines Entscrambelungs-Schltis- 
sals entsprechend der vorgegebenen Einheit 
von verscrambeltem Inhalt entscrambelt wird, 
einen Speicherschritt (S22) zum Speichern des 
empfangenen verscrambelten Inhaits; 
einen Entscrambel-Verarbeitungsschrltt (S33) 
zum (a) Extrahieren der vorgegebenen Einheit 
von verscrambeltem Inhalt aus dem gespeicher- 
ten verscrambelten Inhalt, und (b) Gewinnen ei- 
ner vorgegebenen Einheit von Inhalt aus der ex- 
trahierten vorgegebenen Einheltvon verscram- 
beltem inhatt; und 

einen Wledergabeschritt (S34) zum Wiederge- 
ben der vorgegebenen Einheit von Inhalt in der 
gewonnenen Reihenfolge, 

dadurch geicennzeichnet, dass: 

der Empfangsschritt {S21 ) des Weiteren dazu 
dient, wenigstens ein Element von Spelcherin- 
formationen zu empfangen, in das eine Liste ein- 
gebettet ist, die alle zum Entscrambein des vers- 
crambelten Inhaits zu verwendenden Entscram- 
belungs-Schlussel enthSIt, 
der Speicherschritt (S22) des Weiteren dazu 
dient, die empfangenen Speicherinfomiationen 
zu speichern, und 

die Befehle das Computersystem des Weiteren 
veranlassen, einen Listen-Extrahierschritt(S31) 
zum Extrahleren der Liste aus den gespeicher- 
ten Speicherinfonmationen durchzufQhren. 

20. Aufzeichnungsmedium zum Speichern von Befeh- 
len, die wenigstens einen Tell eines Computersy- 
stems veranlassen, die foigenden Schritte durchzu- 
fDhren: 

einen Erfassungsschritt (81, S3) zum Erfassen 
von zu verscrambeln dem Inhalt und einer Viel- 
. zahl von Entscrambelungs-SchlQssein; 
einen Verscrambei-Verarbeitungsschritt (S5) 
zum Verscrambeln einer vorgegebenen Einheit 
von Inhalt aus dem erfassten Inhatt, so dass die 
vorgegebene Einheltvon verscrambeltem Inhalt 
unter Verwendung eines Entscrambelungs- 
Schlussels entscrambelt wird, der fur jede vor- 
gegebene Einheit Oder jede Gmppe einer Viei- 
zahl vorgegebener Einheiten verschieden ist; 
und 

einen Rundsendeschrltt (S7) zum Rundsenden 
des verscrambelten Inhaits, dadurch gekenn- 
zeichnet, dass: 

die Befehle das Computersystem des Wei- 
teren veranlassen, durchzufuhren: 
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einen Listen-Erzeugungsschritt (S4) 
zum Erzeugen einer Liste der Ents- 
crambelungs-Schlussel; und 
. einen Einbettschritt(S6) zum Einbetteri 
der Liste in wenigstens eln Element 
vorgegebener Infomnationen, urn we- 
nigstens ein Element von Spetcherln- 
fomnationen zu erzeugen, und 
der Rundsendeschrrtt (S7) des Weite- 
ren zunn Rundsenden der erzeugten 
Speicherinfomnationen dient. 

21. Verfahren zum Empfangen und Wiedergeben von 
verscrambeltem Inhalt, wobei das Verfahren die fol- 
gen den Schritte umfasst: 

einen Empfangsschritt (S21) zum Empfangen 
des verscrambetten Inhalts, wobei der vers- 
crambelte Inhalt so verscrambelt ist, dass eine 
vorgegebene Einhelt von verscrambeltem In- 
halt, die ein Teil des verscrambelten Inhalts ist, 
unter VenArendung eines Entscrambelungs- 
Schlussels entsprechend der vorgegebenen 
Einheitvon verscrambeltem Inhalt entscrambelt 
wird; 

einen Speicherschritt (S22) zum Speichem des 
empfangenen verscrambelten Inhalts; 
einen Entscrambel-Verarbeitungsschritt (S33) 
zum (a) Extrahieren der vorgegebenen Einheit 
von verscrambeltem Inhalt aus dem gespeicher- 
ten verscrambeltem Inhalt und (b) Gewinnen ei- 
ner vorgegebenen Einheitvon inhalt aus derex- 
trahierten vorgegebenen Einheitvon verscram- 
beltem Inhalt; und 

einen Wiedergabeschritt (S34) zum Wiederge- 
• ben der vorgegebenen Einheitvon Inhalt in der 
gewonnenen Reihenfoige, dadurch gekenn- 
zeichnet, dass: 

der Empfangsschritt (S21) des Wetteren 
dazu dient, wenigstens ein Element von 
Speicherinformationen zu empfangen, in 
das eine Liste eingebettet ist, die aile zum 
Entscrambeln des verscrambelten Inhalts 
zu verwendenden Entscrambelungs- 
Schlussel enthalt, 

der Speicherschritt (S22) des Weiteren da- 
zu dient, die empfangenen Speicherinfor- 
mationen zu spelchern, und 
das Verfahren des Weiteren einen Ltsten- 
Extrahierschritt (331) zum Extrahieren der 
Liste aus den gespeicherten Speicherinfor- 
mationen umfasst. 

22. Verfahren zum Verscrambein von Inhalt und Rund- 
senden des verscrambelten Inhalts an eine Emp- 
fangsvomchtung (200), wobei das Verfahren die fol- 
genden Schritte umfasst: 
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einen Erfassungsschritt (81, S3) zum Erfassen 
von 2U verscrambelndem Inhalt und einer Viel- 
zahl von Entscrambelungs-Sc hi Ossein; 
einen Verscrambel-Verarbeitungsschritt (S5) 
zum Verscrambein einer vorgegebenen Einheit 
vom Inhalt aus dem erf assten Inhalt, so dass die 
vorgegebene Einheitvon verscrambeltem Inhalt 
unter Verwendung eines Entscrambeiungs- 
Schlussels entscrambelt wird, der fur jede vor- 
gegebene Einheit oder jede Gruppe einer Viel- 
zaht vorgegebener Einheiten venschieden ist; 
und 

einen Rundsendeschritt (S7) zum Rundsenden 
des verscrambelten Inhalts, dadurch gekenn- 
zelchnet, dass: 

das Verfahren des Weiteren umfasst: 

einen Listen-Erzeugungsschritt (84) 
zum Erzeugen einer Liste der Ents- 
crambeiungs-Schlussel; und einen 
EInbettschritt (S6) zum Einbetten der 
Liste in wenigstens ein Element vorge- • 
gebener Informationen, um wentgsteins ' 
ein Element von Speicherinformatio-.' 
nen zu erzeugen, und 
der Rundsendeschritt (S7) des Weite- 
ren zum Rundsenden der erzeugten 
Speicherinformationen dient. 



Revendlcatlons 

1. Disposrtif de reception (200) pour recevoir et repro- 
duire un contenu broulll^; comprenant : 

des moyens de reception (201 ) pour recevoir le 
contenu brouill^, le contenu brouille 6tant 
brouilie de telle sorte qu'une unite predetenml- 
n^e du contenu brouili6, qui est une partie du 
contenu brouilie, est desembrouillee moyen- 
nam {'utilisation d'une cl6 de d^sembroulUage 
correspondant k I'unite pr^d^terminee du con- 
tenu brouille; 

des moyens de m6moire (202) pour m6moriser 
ie contenu brouille re^u; 

des moyens (204) de traltement de d6sem- 
brouillagepour(a) extraire I'unite predeterminee 
de contenu desembrouill^ k partir du contenu 
brouilie m^moris^, et (b) obtenir une unit^ pr§- 
detemninee de contenu k partir de I'unite prede- 
ten-nin6e extralte de contenu brouiH6; et 
des moyens de reproduction (205) pour repro- 
duire I'unite pr6d6termineBde contenu dans I'or- 
dre obtenu, 

caracterise en ce que : 
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les moyens de reception (201 ) sont agences .de 
maniere a recevoir au moins un elerpent de I'in-. 
. formation de memorisation, dans laquelle est in- 
ser6e une Irate incluant toutes les c\6s de. 
d6aembroulllage devant Stre utilisees pour d6- 5 
sennbrouliler le contenu broultle, 
les moyens de m^moire (202) sent agenc6s de 
manifere h m^moriser rinfonnation de nri6moire 
re^ue, 

le dispositif de reception (200) comporte en io 
outre des moyens (301) d'extraction de liste 
pour extraire la liste ^ partir de rinformatlon de 
memoire memorisee, et 5. 
les moyens (204) de traitement de desem- 
brouillage sont agenc^s pour rextraction d'une 15 
cie de desembrouiliage correspondant a I' unite 
prdd^termin^e de contenu brouill^ a partir de la 
liste extraite, I'obtention de I'unite pred6termi- 
nee de contenu par desembrouiliage de I'unite 
pr^dStemnin^e extraite de contenu brouill^ en 20 
utiiisant ia cle de desembrouiliage extraite. 

2. Dispositif de reception selon ia revendication 1 , dans 
lequel 

les moyens de r6cepflon (201 ) re^oivent un 6l6mem ss 
d'infonmation de memoire, dans lequel la liste est 
tns^r^e, 

les moyens de memoire (202) memorisent le conte- 6. 
nu broullle requ et le un element d'information de 
m6moire, et 30 
les moyens d'extraction de liste (301) extraleht la 
liste h partir d'un 6l6ment memorise de Tinformation 
de memoire. 

3. Dispositif de reception selon la revendication 1 , dans 35 
lequel les moyens de r6ception (201 ) repoivent une 7, 
plurality d'^l^ments d'information de memoire dans 
chacun desquels est inser^e une partie divisee de 

la liste, 

les moyens de memoire (202) m6morisent le conte- 4o e. 
nu broui!l6 regu et la plurallte d'el6ments tfinforma- 
tion de m6molre, et 

les moyens (301) d'extraction de la liste extraient la 
liste a partir de la plurallte memorisee d'elements 
tfinformation de m6moire. 

4. Dispositif de reception selon la revendication 1 , dans 
lequel les moyens de reception (201) re9oiventse- 
quentiellement un paquet de flux de transport (TS) 
incluant runlt6 pr6d6termin6e de contenu broulll^. so 
les moyens de memoire (202) memorisent s6quen- 
tiellement le paquet de flux TS re9u, dans lequel 

les moyens de traitement de desembrouiliage (204) 
inciuent : 

55 

des moyens d'extraction du contenu broullle 
pour extraire I'unlte pr6d6termin6e du contenu 
brouilie & partir de I'un des paquets de flux TS 



memorises dans les moyens de memoire, et 
compter la position ordinale des paquets de flux 
TS -k partir du paquet de flux TS de tete; 

. des moyens (21 2) d'extraction de cle de desem- 
brouiliage pour extraire une cle de desem- 
brouiliage k partir de ia liste, sur la base de la 
position ordinale compt^e; et 

. des moyens de desembrouiliage (211) pour d6- 
sembrouiller I'unite predeterminee- extraite du 
contenu d6sembrouilie en utiiisant ia cl6 de de- 
sembrouiliage extraite. 

Dispositif de reception selon ia revendication 1 , dans 
lequel : 

les moyens de reception (201) repoivent au 

moins un message de commande d'intituie en 

memoire (ECM) en tantqu'au moins un element 

de rinformatlon de memoire, ia liste etant inse- 

ree dans une partie devant etre codee dans le 

corps principal du message ECM, 

les moyens de memoire (202) memorisent des 

messages ECM de memoire re9us, et 

des moyens (301) d'extraction de la liste inter- 

pr&tent des messages ECM de memoire re^us, 

pour extraire la liste. 

Dispositif de reception selon la revendication 5, dans 
lequel 

les moyens de reception (201) resolvent les messa- 
ges ECM de memoire incluant une infonnation 
d'identification servant k distingue r les messages 
ECM de memoire vis-a-vis d'un autre type de mes- 
sage ECM. 

Dispositif de reception selon la revendication 5, dans 
lequel les moyens de reception (201) resolvent les 
messages ECM de memoire k un instant donne. 

Dispositif de reception selon la revendication 1 , dans 
lequel les moyens de reception (201) regoivent se- 
quentieilement un paquet de f lux TS incluant (a) Tuni- 
te predeterminee du contenu brouilie et (b) une in- 
formation de specification de paquet servant a spe- 
cifier un paquet de fluxTS non broullle, et 
les moyens de memoire (202) memorisent sequen- 
tiellement le paquet de flux TS regu, 
dans lequel les moyens de traitement de desem- 
brouiliage (204) Inciuent : 

des moyens d'extraction de contenu brouilie et 
rinfomiation de specification de paquet ^ partir 
de Tun des paquets defluxTS memorises dans 
les moyens de memoire; 
des moyens (212) d'extraction de cie de desem- 
brouiliage pour extraire une cle de desem- 
brouiliage k partir de la liste, sur la base de rin- 
formatlon de specification de paquet extrait; et 
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des moyens de desembrouillage (21 1 ) pour de- 
sembroullier I'unite pr6determinee extralte du 
contenu brouiII6 en utillsant . la cl6 de desem- 
brouillage extraite. 

9. Dispositif de reception seion la revendication 8, dans 
lequel 

I'information de specification de paquet est I'un de 
compteur de continuite (CC), du nombre de paquets 
de fluxTS, d'un nombre cumul6 de donn6es, d'une 
duree de reproduction relative et d'un rdent'rfiant de 

cl6 de broutllage, 

les moyens (210) d'extractlon du contenu brouill6 
extraient, en tant qu'information de specification de 
paquets, I'un du compteur de continuity (CC), du 
nombre de paquets de flux TS, de la quantite cumu- 
iSe de donn6es, de la dur6e de reproduction relative 
et de I'identifiant de cl6 de brouillage, et 
les moyens (212) d'extraction de la cle de desem- 
brouillage appliquent une op6ration pred6termin6e 
a I'information extraite en tant qu'information d'iden- 
tlfication de paquet pour g6n6rer un identifiant de cl6 
de desembrouillage, et extraient une cle de desem- 
brouillage k partir de la liste sur la base de i'identifiant 
de la cl^ de desembrouillage. 

10. Dispositif de reception selon la revendication 1 , dans 
lequel les moyens de reception (201) re9oivent se- 
quential lement un paquet TS rncluant (a) runit6 pre- 
date mni nee de contenu brouill6 et (b) une information 
d'image I non embrouillee, rinfomriation d'image 1 
indiquant si le paquet de flux TS correspondant a 
I'information estconstitueparunepartie d'une image 
I et/ou d'une image I ou non; et 

les moyens de m6moire (202) memorisent s6quen- 
tiellement le paquet de flux TS re^u. 
dans lequel les moyens de traitement de desem- 
brouillage (204) incluent : 

des moyens (210) d'extractlon du contenu 
brouilie pour, lors de Texecution de processus 
particulier de reproduction, extraire Tunlte pr6- 
d6terminee de contenu brouille et rinformatlon 
d'image I a partir de I'un des paquets de flux TS 
memorises dans les moyens de m6moire; 
des moyens (204,352) d'6valuation d'une ima- 
ge I servant ^ 6valuer si I'unite extraite pr§d6- 
terminee du contenu brouihe est constituee par 
une partie d'une image I / une image 1 ou non, 
sur la base de Tinformation d'image 1 extraite; 
des moyens (212) d'extraction de la cle de de- 
sembrouillage pour extraire une cl6 de desem- 
brouillage a partir de la liste uniquement lorsque 
I'unite extraite predetennin6e du contenu 
broulll6 est constituee par une partie d'une ima- 
ge I / une image I; et 

des moyens de desembrouillage (211) pourd6- 
sembrouiller I'unite extraite predeterminee du 



contenu brouille en utiiisant la cle de desem- 
brouillage extraite; 

11. Dispositif de reception selon la revendication 1 ge- 
5. , . rant en outre une infonmation de contrat et constitue 

par un module de securite dont la partie ne fonction- 
ne pas effectivement si un contrat n'a pas 6te passe, 
et d'autres modules, le dispositif de reception com- 
prenant en outre: 

10 

des moyens (203) de conservation de liste pour 
conserver la liste extraite par les moyens d'ex- 
traction de liste, 

15 dans lequel les moyens (301 ) d'extraction de liste et 
les moyens (203) de conservation de liste sont pre- 
vus h rint6rieur du module de securite. 

12. Dispositif de diffusion (1 00) pourbrouillerun contenu 
20 et diffuser le contenu brouille ^ un dispositif de re- 
ception (200), le dispositif de diffusion (100) 
comprenant : 

des moyens d'acquisltion (1 06,1 07) pouracque- 
25 rir le contenu devant Stre brouille et une pluralite 

de cles de desembrouillage; 
des moyens (103) de traitement de brouillage 
pourbrouiller une unite predeterminee d'un con- 
tenu k partir du contenu acquis de sorte que 
30 I'unite predeterminee du contenu brouille estde- 

sembrouiliee en utiiisant une cle de desem- 
brouillage differente pour chaque unite prede- 
terminee ou pour chaque ensemble d'une plu- 
ralite d' unites predetenninee; et 
35 des moyens de diffusion (1 05) sont agenc6s de • 

maniere a diffuser le contenu brouille; 

caracterise en ce que : 

40 le dispositif de diffusion (100) comprend en 

outre : 

des moyens (102) de production de liste 
sers/ant a generer une liste des cles de de- 

45 sembrouillage; et des moyens d'insertion 

(1 04) pour ins6rer la liste dans au moins un 
element d'une information predeterminee 
pour generer au moins un element d'infor- 
mation de m6moire, et 

50 les moyens de diffusion (1 05) sont agences 

de maniere ^ diffuser rinfomnation de me- 
moire gen6ree, 

i 3. Dispositif de diffusion selon la revendication 1 2, dans 
55 lequel des moyens d'insertion (1 04) ins^rent la liste 
dans un element dMnformation predeterminee pour 
generer un element d'information de m6moire, et 
les moyens de diffusion (1 05) diffusent l'6iement g6- 
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ner6 d'information et le contenu brouille. 

1 4. Disposittf de diffusion seibn la revendication 1 2, dans 
leque! 

les moyens d'insertion ins^rent une partie divis6e de 
la liste dans chacun d'une pluralite d'elements d*in- 
formation pr6d6terTnin6e pour g6n6rer une plurality 
d'elements d'infomnation de mennoire, et 
les moyens de diffusion (105) diffusent la pluralite 
g6n6r6e d'6 laments d' information de m6moire et !e 
contenu brouilid. 

1 5. DispQsltif de diffusion selon la revendication 1 2, dans 

lequel les moyens d'insertion (104) inserent la liste 
dans une partie devant §tre cod6e dans un corps 
principal d'au moins un message ECM pour generer 
au moins un 6l6ment d'informatlon de m6moire. 

1 6. Dispositrf de diffusion selon la revendication 1 2, dans 
iequel 

les moyens de diffusion (1 05) diffusent un ensemble 
de rinformation de mdmoire alors que la totality du 
contenu brouille correspond a un ordre desem- 
broulil^. 

17. Programme infonnatique comprenant un code infor- 
matique servant, lorsqu'U est charg6 dans un systd- 
me informatique et est execute, ^ amener ledlt sys- 
teme informatique a executer les 6tapes suivantes : 

une 6tape de reception (S21) pour recevoir un 
contenu brouille, te contenu broulil^ Stant 
brouille de telle sorte qu'une unite pred6tenni" 
nee du contenu brouille, qui est une partie du 
contenu brouiil6, est d6sembrouille en utllisant 
une cle de desembrouillage correspondant a 
une umt6 pred6termln6e de contenu brouille; 
une 6tape de m6moire (S22) pour memoriser le 
contenu brouille re9u; 

une dtape de trattement de desembrouillage 
(S33) pour (a) extraire runit6 predetennin6e du 
contenu brouilte k partlr du contenu broulH6 m6- 
moris^, et (b) obtenir une unite pred^terminee 
de contenu k partlr de I'unite predeterminee ex- 
traite du contenu brou}ll6; et 
une etape de reproduction (S34) pour reprodui- 
re ruTiit6 predeterminee du contenu dans r ordre 
obtenu, 

caracterise en ce que : 

r^tape de reception {S21) sert en outre ^ rece- 
voir au moins un element d'information de m6- 
moire, dans lesquels est Ins6r6e une liste in- 
cluant toutes les cl6s de desembrouillage de- 
vant etre utilisees pour desembroulller le conte- 
nu broullie, 

rstape de memorisation (S22) sert en outre k 



memoriser rinfomriation de memoire re9ue, 
ie code Informatique amene en outre iedit sys- 
t^me informatique k executer une 6tape (S31) 
d'extraction de liste pour extraire la liste k partir 
de rinformation de m6moire m6moris6e, et 
r6tape de traitement de desembrouillage (S33) 
sert en outre ^ extraire une cl6 de desem- 
brouillage con-espondant k 1' unite predetenni- 
nee du contenu brouille a partir de la liste extrai- 
te, et a obtenir I'unite predeterminee de contenu 
par desembrouillage de I'unite predeterminee 
extraite du contenu brouille moyennant I'utllisa- 
tion de la cle de desembrouillage extraite. 

15 ia. Programme informatique comprenant un code infor- 
matique pour, lorsqu'il est charge dans un systeme 
Infonnatique et est execute, amener Iedit systeme 
informatique a executer les etapes suivantes : 

20 une 6tape d'acquisltion (SI ,S3) pour acquerir 

un contenu devant etre brouille et une pluralite 
de cies de desembrouillage; 
une etape de traitement de brouitlage (S5) pour 
broulller une unite predeterminee du contenu k 
25 partir du contenu acquis de sorte que I'unrte pre- 

determinee du contenu brouille est desem- 
brouiliee moyennant I' utilisation d'une cie de de- 
sembrouillage differente pour chaque unite pre- 
determinee ou cliaque ensemble d'une pluralite 
30 d' unites predetermine es; et 

une etape de diffusion (S7) pour diffuser le con- 
tenu brouille, 

caracterise en ce que : 

35 

le code informatique amene en outre Iedit sys- 
teme infomnatique k executer : une etape (S4) 
de production de liste pour generer une liste des 
cies de desembrouillage; et une etape d'inser- 
'fo tion (S6) pour inserer la liste dans au moins un 

element d'infomnation predeterminee pour ge- 
nerer au moins unei6ment d'information de me- 
moire, et 

retapede diffusion (S7) et sert en outre a diffuser 
45 I'informatlon de memoire g6ner6e. 

1 9. Support d'enregistrement pour memoriser des infor- 
mations qui amenent au moins une partie d'un sys- 
teme informatique a suivre les etapes suivantes : 

50 

une etape de reception (S21) pour recevoir un 
contenu brouille, le contenu brouille etant 
brouille de telle sorte qu'une unite predetemni- 
nee du contenu brouille. qui est une partie du 
55 contenu brouille, est desembroulllee moyen- 

nant 1' utilisation d'une cie de desembrouillage 
con-espondant k I'unite predetemiin6e de con- 
tenu brouille, 
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une etape de memoire (S22) pour memoriser !e 
contenu brouilie re9u; 

une 6tape de traitement de dSsembroulllage 
(S33) pour (a) extraire I'unite predeterminee de 
contenu brouill6 k partirdu contenu farouille s 
nnorise, et (b) obtenir une unite predeterminee 
de contenu ^ partlrde I'unit6 pr6d6termin6e ex-' 
traite du contenu brouill6; et 
une etape de reproduction (S34) pour reprodul- 
re runit6 pr6d6ternnin6e de contenu dans I'orcire 
obtenu, 

caracterise en ce que : 

l'6tape de reception (S21) sert en outre k rece- 
voir au moins un element d'information de me- 
moire, dans lequel est ins6r6e une liste incluant 
tous les codes de desembrouiliage devant Stre 
utilise pour desembroulller le contenu brouilie, 
r6tape de m6moire (S22) sert en outre k m6mo- 20 
riser I'infomnation de memoire re9ue; et 
les instructions amfenent en outre ledit systfeme 
informatique a ex6cuter une 6tape (S31) d'ex- 
traction de liste pour extraire la liste k partir de 
rinformation de memoire m6moris6e; 25 

20. Support d'enregistrement pour m^moriser des ins- 
tructions qui amenent au moins une partie d'un sys- 
teme infonnatique pourex6cuter les 6tapes suivan- 
tes: 

une 6tape d'acquisltion (S1 .S3) pouracqu6rir le 
contenu devant Stre brouilie et une pluralite de 

cles de desembrouiliage; 

une 6tape de traitement de brouillage (S5) pour 35 
broulller une unite predeterminee du contenu a 
partir du contenu acquis de sorte que i'unite pre- 
d6tenninee du contenu brouilie est desem- 
brouillee en utilisantune cle de desembrouiliage 
dlff6rente pour chaque unit6 pr6d6tennin6e ou 4o 
cliaque ensemble d'une pluralite d'unltes pr6- 
d6termin6es; et 

une 6tape de diffusion (S7) pour diffuser le con- 
tenu brouilie, 

45 

caracterise en ce que: 

des instructions amenent en outre ledit systems 
infonmatique a executer : une 6tape (84) de pro> 
duction de liste pour g6n6rer une liste des cles 50 
de desembrouiliage; et une etape rfinsertion 
(86) pour insurer la liste dans au moins un ele- 
ment d'information pred6termin6e pourg6nerer 
au moins un 6l6ment d'information de m6moire, 
et 

I'etape de diffusion (S7) sert en outre k diffuser 
rinformation de m6moire gener6e. 



21 . Precede de reception et de reproduction d'un con- 
tenu brouilie, le proc6de comprenant les etapes 
comprenant :. 

une etape de reception (S21) pour recevoir le .. 
contenu brouilie, le contenu brouilie 6tant 
brouilie de telle sorte qu'une unit6 predetermi- 
nee du contenu brouilie, qui est une partie du 
contenu brouilie, est desembrouille moyennant 
r utilisation d'uneciede desembrouiliage corres- 
pondant a I'unite predeterminee du contenu 
brouilie; 

une etape de memoire (S22) pour memoriser le 
contenu brouilie re9u; 

une etape de traitement de desembrouiliage 
(S33) pour (a) extraire I'unite predeterminee du 
contenu brouilie k partir du contenu brouilie me- 
morise et (b) obtenir une unite predeterminee 
de contenu a partir de I'unite predetemiinee ex- 
traite et du contenu brouilie; et 
une etape de reproduction (S34) pour reprodui-. 
re I'unite predetemiln6e de contenu dans I'ordre 
obtenu, 

caracterise en ce que retape de reception (82.1 ) 
sert en outre a recevoir au moins un element d'in- 
formation de memoire, dans lequel est inseree une 
liste incluant toutes les cles de desembrouiliage de- 
vant etre utillsees pour desembroulller le contenu 
brouilie, 

retape de memorisation (S22) sert en outre a me- 
■ moriser rinfomiation de memoire re?ue, et 

le precede comprend en outre une etape d'extraction 
de liste (S31) pour extraire la liste a partir de rinfor- 
mation de memoire m6mons6e. 

22. Precede pour broulller un contenu et diffuser le con- 
tenu brouilie vers un appareil de reception (200), le 
precede comprenant les etapes comprenant : 

une etape d'acquisitlon (SI ,S3) pour acquerir le 
contenu devant etre brouilie et une pluralite de 
cies de desembrouiliage; 
une etape de traitement de brouillage (SS) pour 
ie brouillage d'une unite pr6determin6e du con- 
tenu ^ partir du contenu acquis de sorte que 
I'unite predeterminee du contenu brouilie estde- 
sembrouillee en utiilsant une cle de desem- 
brouiliage differente pour chaque unite prede- 
terminee ou chaque ensemble d'une pluralite 
d'unites predetermines; et 
une etape de diffusion (S7) pour la diffusion du 
contenu brouilie, 

caracterise en ce que : 

le proc6d6 comprend en outre : une etape (S4) 
de production de liste pour produlre une liste 
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des ct^s de desembrouiUage; et une etape d'}n- 
sertion (S6) pour inserer la liste dans au moins 
un 6l6mentd'information'pr§d6termin6pourge- 
nerer au moins un element d'information de nrie- 
molre, et s 
I'etape de diffusion (S7) sert en outre a diffuser 
rinfoim^tion de m6moire.g6n6r6e. 
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DATA STRUCTURE OF SCRAMBLING KEY LIST DESCRIPTOR 



CA_Ks_Ust_descriptor() { 




descriptor_tag 


1 BYTE 


descriptor length 
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